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Description 

This invention relates to a fuel burner control system which utilize an electrical resistance igniter, and to a method 
of control. 

5 Fuel burner control systems with hot surface ignition, wherein a main burner is directly ignited by an electrical 

resistance igniter, are becoming more widely used. While the prior art discloses various such systems which appear 
to perform adequately, there is a need to improve the overall performance and reliability of the electrical resistance 
igniter used therein. 

Specifically, the typical electrical resistance igniters utilized in prior art systems generally require between approx- 
10 imately 15 and 45 seconds of electrical energizing to warm up to a temperature sufficiently high to ignite the air-fuel 
mixture at the burner. While such warm-up times present no particular performance problem, they are a disadvantage 
with regard to testing the system on the assembly line of the device incorporating the system. Specifically, in the 
assembly line of the device such as a furnace or boiler utilizing the system, the system is tested to determine that it 
operates properly. Among tests performed is a test to determine that the igniter does, in fact, attain a temperature 
15 sufficiently high to ignite the air-fuel mixture. Therefore, unless normal system function is bypassed or altered in some 
manner for this test, the igniter will be energized for a time period somewhere between 15 and 45 seconds. Since a 
test time of 45 seconds, and to a lesser extent, a test time of 15 seconds, are significant cost factors, particularly in a 
high-volume assembly line, it is desirable to provide an igniter with faster warm-up time so as to reduce such test times. 

Many control systems have been proposed for controlling ignition of a fuel burner by an electrical resistance igniter. 
20 Some of the proposed control systems are illustrated in US-A-4 402 663 and US-A-4 61 5 282. Other proposed systems 
are disclosed in EP-A-0 191 348 and US-A-4 669 430. 

In GB-A-2 104 683 there is described a fuel burner control system according to the preamble of claim 1 . In particular, 
GB-A-2 104 683 discloses a control system including a means for controlling energizing of an electrical resistance 
igniter to ensure sufficient heating thereof to attain the desired temperature to ignite gas. A method according to he 
2S preamble of claim 15 is also known from GB-A-2 104 683. 

Additionally, there are various devices which provide a heat output within a very short time, such as less than 10 
seconds, after a demand for heat is initiated. Such devices generally utilize spark ignition. It is desirable to provide an 
electrical resistance igniter having a sufficiently short warm-up time to enable such an igniter to be used in lieu of spark 
ignition in such devices. 

30 it has been determined that a warm-up time shorter than that in the prior art systems is attainable with an electrical 

resistance igniter constructed of a "tungsten heater element embedded in a silicon nitride insulator. While such an 
igniter, hereinafter referred to as a silicon nitride igniter, appears to possess the inherent capability of providing the 
desired feature of a fast warm-up time, it has certain characteristics which necessitate the use of unique control system 
circuitry. 

35 Specifically, the silicon nitride igniter has a relatively narrow useable temperature range. That is to say, the tem- 

perature span between the lowest ignition temperature which will effect ignition and the highest temperature which the 
igniter can safely and reliably withstand is relatively narrow. If the igniter is repeatedly energized so that its temperature 
is at or near such a highest temperature, the igniter will eventually fail, such failure generally consisting of melting of 
the tungsten heater element. 

40 it is, therefore, a primary object of the invention to provide a generally new and improved fuel burner control system 

of the type which utilizes an electrical resistance igniter, wherein control means are provided to ensure that the igniter 
will be operated below its maximum allowable temperature value. 

It is a further object to provide such a system wherein the control means is effective to adaptively energize the 
igniter so as to establish a desired temperature of the igniter, which desired temperature is preferably at or slightly 
45 above the lowest possible ignition temperature. 

It is a further object to provide such a system wherein the igniter is rapidly heated to attain ignition temperature 
and is subsequently modulated to maintain ignition temperature. 

To achieve this, the fuel burner control system of the invention is characterized by the features set forth in the 
characterizing part of claim 1 and the method of the invention is defined by the method steps claimed in the charac- 
50 terizing part of claim 1 5. 

According to the invention, the energizing control involves reducing the energizing in subsequent successive burner 
cycles in which ignition is successful until a burner cycle occurs in which ignition is not successful, and subsequently 
effecting an increase of the energizing so as to cause the igniter to be heated to the desired value of ignition temperature 
at or slightly above the lowest possible value. 
55 Advantageous embodiments of the invention are claimed in the subclaims. 

In the preferred embodiment, a silicon nitride igniter is connected through solid-state switching means across a 
power source. A microcomputer and related circuitry control the switching means in such a manner so that the igniter 
is rapidly heated to ignition temperature during a warm-up time period, and is then modulated to maintain ignition 
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temperature. During each attempt at ignition, the length of the warm-up time period and the degree of modulation are 
determined by the microcomputer based on sensed values of the voltage across the igniter and on a learning routine 
so that, after a sufficient number of ignition attempts, the igniter will be energized to a temperature at or slightly above 
the lowest possible ignition temperature. 
5 The system of the present invention includes various other features, such as checking of various circuit components 

and controlling of the circulator blower in response to burner flame, which enhance the safety and performance of the 
system. 

The above mentioned and other objects and features of the present invention will become apparent from the 
following description when read in conjunction with the accompanying drawings. 
10 FIGS. 1A, 1 B, and 1C, when combined, is a diagrammatic illustration of a burner control system constructed in 

accordance with the present invention; and FIGS. 2A through 21, when combined, is a flow chart depicting the logic 
sequence programmed into and executed by the microcomputer of the system of combined FIGS. 1 A, 1 B, and 1 C. 

The diagrammatic. illustration of the burner control system of the present invention is obtained by placing FIG. 1 A 
to the left of FIG. "IBand FIG. ICtothe right of FIG. 1B. When so combined, the connecting points A1 through A7 of 
is FIG. 1Aare aligned with points A1 through A7 of FIG. "IB, and points B1 through B9 of FIG. 1 B are aligned with points 
B1 through B9 of FIG. 1C. 

While the preferred embodiment of the control system utilizes gas as the fuel, it is to be understood that, with minor 
circuit modifications, other fuels, such as oil, could be used. 

Referring to FIG. 1 A, the control system of the present invention includes a voltage step-down transformer 10 

20 having a primary winding 12 connected to terminals 14 and 16 of a conventional 120 volt alternating current power 
source. Terminal 16 is connected through a resistor R1 to chassis common C, hereinafter referred to as common C. 

An inducer 18, sometimes also referred to as a purge fan or a combustion air blower, is connected through a set 
of normally-open relay contacts 20 to terminals 1 4 and 1 6. Inducer 1 8 is in air-flow communication with the combustion 
chamber of a furnace (not shown). When gas is flowing into the combustion chamber, inducer 18 provides the air 

25 required for developing a combustible air-gas mixture and provides a positive means for forcing the products of com- 
bustion out of the combustion chamber through the flue. It is noted that operation of inducer 18 is required whenever 
there is a flame so as to prevent the flame from seeking air for combustion from an area outside the combustion 
chamber. Such a condition would either cause the flame to extinguish or to roll out of the combustion chamber. Also, 
immediately before and after burner operation, when gas is not flowing, or at various other times as will be hereinafter 

30 described, inducer 18 is energizable to purge the combustion chamber of any accumulated unburned fuel or products 
of combustion. The utilization of inducer 18 is required for these direct ignition burner control systems in which the 
combustion chamber is sealed. It is to be understood, however, that there are other systems in which an inducer is not 
required and can thus be omitted. 

A circulating blower 22 is connected through a set of normally-open relay contacts 24 to terminals 14 and 16. 

3S Circulating blower 22 provides for the circulation or distribution of the conditioned air through the dwelling. 

Referring to FIG. 1C, an electrical resistance igniter 26 is connected through a triacQI to terminal 14 and through 
a triac Q2 to terminal 16. Igniter 26, which is preferably a silicon nitride igniter, is positioned adjacent a main burner 
28 and is effective, when sufficiently heated, to ignite gas emitted from burner 28. Burner 28 is grounded at 30. 

The flow of gas to burner 28 is controlled by two valves 32 and 34 connected fluidically in series in a gas conduit 

40 36 leading from a gas source (not shown) to burner 28. A valve winding 38 controls valve 32, and a valve winding 40, 
connected in parallel with valve winding 28, controls valve 34. Both valves 32 and 34 must be open to enable gas to 
flow to burner 28 so as to establish a burner flame 42. It is to be understood that valves 32 and 34 can be separate 
devices as shown or a unitary device. Utilization of such a redundant valve arrangement, wherein two serially-connected 
valves control the flow of gas to a burner, is well known in the art. 

45 a flame probe 44 is positioned so as to be impinged by burner flame 42. Flame probe 44 is connected through a 

resistor R2, a resistor R3, and a capacitor C1 to terminal 14, and through resistor R2 and a resistor R4 to a flame 
detect circuit indicated generally at 46. 

Referring to FIG. 1 A, one end of secondary winding 48 of transformer 10 is connected to a junction 50, and the 
other end thereof is connected to common C so as to provide a 24 volt alternating current power source between 

50 junction 50 and common C. A metal oxide varistor MOV1 is connected across secondary winding 48 to suppress any 
transient voltages. 

Also connected across secondary winding 48 are a power supply 52, a real time base circuit 54, and a reset circuit 

56. 

Power supply 52 includes a rectifier CR1, a filter capacitor C2, a resistor R5, and a zener diode VR1. Rectifier 
55 CR1 and capacitor C2 are connected in series, and resistor R5 and zener diode VR1 are connected in series across 
capacitor C2 so as to provide a +5.6 volt unidirectional power source at a terminal 58. This +5.6 volt power source is 
applied to various circuit components including the microcomputer M1 shown in FIG. 1B. Capacitor C2 is effective, in 
the event of an electrical power interruption, to maintain the +5.6 volt power source for approximately 5 seconds. 
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Real time base circuit 54 includes a resistor R6, a resistor R7, a filter capacitor C3, and an inverter 60. The values 
of resistors R6 and R7 are such that when the AC sine wave of the voltage across secondary winding 48 is at its zero 
crossover, the voltage at the junction 62 between resistors R6 and R7, which is also the voltage on the input of inverter 
60, is at its mid-supply value which value causes inverter 60 to change its output state. The output signal of inverter 

5 60 is therefore a square wave wherein the transitions between the high and low values of the square wave output occur 
at the zero crossover point of the voltage across secondary winding 48, and the frequency of the square wave is the 
same as the frequency of the voltage across secondary winding 48, such frequency being 60 Hz in the preferred 
embodiment. Real time base circuit 54 therefore provides an accurate time base to microcomputer M1 so as to enable 
microcomputer M1 to provide various critical timed functions which will hereinafter be described. Also, because of the 

10 above-described zero crossover feature, microcomputer Mt can execute functions at specific desired times in the sine 
wave of the voltage across secondary winding 48. As will hereinafter be described, some such functions are pro- 
grammed to occur at or near the zero crossover point of the sine wave voltage and others are programmed to occur 
when the sine wave voltage is at its peak value. 

Reset circuit 56 includes a rectifier CR2 and a capacitor C4 connected in series across secondary winding 48, a 

is resistor R8 connected in parallel with capacitor C4, a series-connected rectifier CR3 and a capacitor C5 connected in 
parallel with capacitor C4, and a resistor R9 connected between the +5.6 volt power source and junction 64 between 
rectifier CR3 and capacitor C5. Prior to electrical power being applied to the system, capacitors C4 and C5 are dis- 
charged. When power is applied, capacitor C4 is charged through rectifier CR2 and the peak voltage of the voltage 
across secondary winding 48. Concurrently, power supply 52 establishes the +5.6 volt power source. When capacitor 

20 C4 is sufficiently charged, conduction through rectifier CR3 is blocked, enabling capacitor C5 to be charged by the 
+5.6 volt power source through resistor R9. When capacitor C5 is charged, the voltage at junction 64 provides a high 
signal to microcomputer M1 , which high signal forces microcomputer M1 out of its reset mode into its run mode. In the 
event that electrical power is interrupted, capacitor C4 discharges through resistor R8. When capacitor C4 is sufficiently 
discharged, rectifier CR3 conducts, enabling capacitor C5 to discharge through rectifier CR3 thereby causing the signal 

2S at junction 64 to become low, which low signal causes microcomputer M1 to enter its reset mode. The discharge time 
constant of the capacitor C4 and resistor R8 circuit loop is such that rectifier CR3 is held non-conductive for a short 
period of time, such as 5 seconds, during which the +5.6 volt power source is still established, and is subsequently 
rendered conductive before the +5.6 volt power source drops significantly. This manner of operation thus prevents a 
reset due to a momentary power interruption and yet ensures that reset will occur before microcomputer M1 might 

30 cause erroneous system operation due to a decrease of the +5.6 volt power source to a marginal value. 

Also connected across secondary winding 48, as shown in FIG. 1 B, are a relay coil 66 for controlling relay contacts 
24 and a relay coil 68 for controlling relay contacts 20. 

Also connected across secondary winding 48 through a high-temperature limit device 70 and a room thermostat 
72 are a voltage limiting circuit 74, a power supply 76, and a thermostat input circuit 78. Limit device 70 comprises a 

3S normally-closed switch controlled by a temperature sensing element located in the plenum of the furnace. Limit device 
70 is effective to open its switch if the temperature in the plenum reaches a value beyond which the furnace is not 
designed to operate safely. Room thermostat 72 can be any conventional thermostat, either mechanical or electronic. 
A mechanical type is illustrated in FIG. 1 A, wherein a bimetal 80 cooperates with a contact 82 in a well known manner. 
Thermostat input circuit 78 includes an inverter 84 whose input is connected through a resistor R10 to a junction 

40 86 between a zener diode VR2 and parallel-connected resistors R11 and R12. Thermostat input circuit 78 functions 
to provide an input signal to microcomputer M1 indicative of whether or not thermostat 72 is calling for heat. Specifically 
when thermostat 72 is not calling for heat, there is no voltage applied to the input of inverter 84. Therefore, the output 
of inverter 84 is high. When thermostat 72 is calling for heat, zener diode VR2 breaks over when the voltage across 
secondary winding 48 reaches the required breakover voltage, causing a high to appear on the input of inverter 84. 

45 On the reverse polarity of the voltage across secondary winding 48, the input to inverter 84 goes low. Thus, when 
thermostat 72 is calling for heat, the output signal of inverter 84 is a square wave; when thermostat 72 is not calling 
for heat, the output signal of inverter 84 is a constant high. 

Voltage limiting circuit 74 enables the system of the present invention to be used with thermostats which require 
power at all times. Specifically, in some electronic type thermostats, a small amount of current must be provided to the 

so thermostat during the off-cycle of the thermostat. In the present system, resistors R13 through R17, referring to FIG. 
1C, are connected in series through a set of normally-closed contacts 88. When such an electronic type thermostat is 
used and it is not calling for heat, the amount of current flow through the thermostat and resistors R1 3 through R1 7 is 
such that the voltage across resistors R13 through R17, which is also the voltage across zener diode VR2, is below 
the breakover value of zener diode VR2. Thus zener diode VR2 does not break over and thermostat input circuit 78 

55 does not falsely produce the square-wave signal indicative of a call for heat. 

Power supply 76 includes a rectifier CR4, filter capacitors C6 and C7, a bias resistor R18, a zener diode VR3, and 
an NPN transistor Q3. Rectifier CR4 and capacitor C6 are connected in series. The collector of transistor Q3 is con- 
nected to the junction 90 of rectifier CR4 and capacitor C6. The emitter of transistor Q3 is connected to a terminal 92. 
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Resistor R18 is connected between the base and collector of transistor Q3. Zener diode VR3 is connected between 
the base of transistor Q3 and common C. Capacitor C7 is connected between terminal 92 and common C. When the 
contacts of limit device 70 and thermostat 72 are in their closed positions, power supply 76 is effective to provide a 
+1 5 volt unidirectional power source at terminal 92. This +1 5 volt power source is applied to various circuit components 

5 in FIGS. 1 B and 1 C as will hereinafter be described. 

Referring to FIG. 1B, microcomputer M1 is a single component 8-bit device. Included within microcomputer M1 
are an 8-bit CPU (central processing unit), a 4K x 8 ROM (read only memory), a 1 28 x 8 RAM (random access read/write 
memory), 23 I/O (input/output) lines, a clock, and a 16-bit timer/event counter. The pins of microcomputer M1 are 
designated V C( XKO, CKI, INT, GND, RESET, DO through D3, G1 through G6, 10 through 13, and L0 through L7. 

10 Pin V cc of microcomputer M1 is connected to the +5.6 volt power source and functions as the main power supply 

input to microcomputer M1 . A filter capacitor C8 is connected between pin and common C. Pin GND is connected 
to common C and functions as the connection o1 microcomputer M1 to common C potential. 

An external oscillator comprises a ceramic resonator 94 in the form of a quartz crystal connected between pins 
CKO and CKI, a resistor R1 9 connected across resonator 94, a capacitor C9 connected between pin CKO and common 

15 C, and a capacitor C10 connected between pin CKI and common C. This oscillator construction provides a machine 
cycle time of approximately 2.8 microseconds. 

The RESET pin is connected to junction 64 in reset circuit 56. The INT pin is connected to the output of inverter 
60 of the real time base circuit 54. Pin G1 is connected to the output of inverter 84 of thermostat input circuit 78. (It is 
to be noted that, for brevity, the various ports and bits are being referred to as pins. For example, port G, bit 1 , is 

20 referred to as pin G1 .) 

Relay coil 66 is connected across secondary winding 48 through a rectifier CR5, a resistor R20, and an NPN 
resistor Q4. The base of transistor Q4 is connected through a resistor R21 to pin L3 of microcomputer M1 . A rectifier 
CR6 is connected in parallel with relay coil 66 to suppress any back EMF generated by relay winding 66, thereby 
protecting transistor Q4f rom any high voltage or high current due to such EMF generation. A capacitor C11 is connected 

25 between common C and junction 96 of relay coil 66 and resistor R20. Capacitor C11 charges to the peak voltage of 
the 24 volt power source at secondary winding 48 so as to assist in initial energizing of relay coil 66, and also functions 
as a filter when rectifier CR5 is blocking current flow When energizing of relay coil 66 is desired, microcomputer M1 
provides a constant digital high signal at pin L3, which high signal biases on transistor Q4. With transistor Q4 on, relay 
coil 66 is energized and effects closing of its contacts 24. When contacts 24 closed, circulator blower 22 is energized. 

30 When energizing of relay coil 66 is not desired, microcomputer M1 causes pin L3 to remain low. 

Similarly, relay coil 68 is connected across secondary winding 48 through a rectifier CR7, a resistor R22, and an 
NPN transistor Q5. The base of transistor Q5 is connected through a resistor R23 to pin D1 of microcomputer M1. A 
rectifier CR8 is connected across relay coil 68, and a capacitor C1 2 is connected between common C and the junction 
98 of relay coil 68 and resistor R22 to perform the same functions for relay coil 68 as performed by rectifier CR6 and 

35 capacitor C11 for relay coil 66. When energizing of relay coil 68 is desired, microcomputer M1 provides a constant 
digital high signal at pin D1 . which high signal biases on transistor Q5. With transistor Q5 on, relay coil 68 is energized 
and effects closing of its contacts 20. With contacts 20 closed, inducer 18 is energized. When energizing of relay coil 
68 is not desired, microcomputer M1 causes pin D1 to remain low. 

The base of an NPN transistor Q6 is connected through a resistor R24 to the junction 100 of relay coil 68 and 

40 transistor Q5. The emitter of transistor Q6 is connected to common C. The collector of transistor Q6 is connected 
through a resistor R25 to the +5.6 volt power source and to pin G4 of microcomputer M1. This circuit provides for 
checking proper operation of transistor Q5. Specifically, the program logic in microcomputer M1 provides for monitoring 
of pin G4. When transistor Q5 is off due to a low signal at pin D1 , transistor Q6 is biased on so that the input signal to 
pin G4 is low; When transistor Q5 is biased on due to a high signal at pin D1 , transistor Q6 is off so that the input signal 

45 to pin G4 is high. If the input signals to pin G4 are not as they are supposed to be, the system enters lockout, a condition 
to be hereinafter described. 

Generally, when inducer 18 is utilized, a pressure switch, responsive to the movement of air by inducer 18, is 
provided. Accordingly, a pressure switch 102 is connected through resistors R26 and R27 across the 24 volt power 
source provided by secondary winding 48. The junction 104 of resistors R26 and R27 is connected to the input of an 

50 inverter 106. The output of inverter 106 is connected to pin L0 of microcomputer M1. In operation, when pressure 
switch 102 is open, the input of inverter 106 is low whereby the output thereof is high. When pressure switch 102 is 
closed, the input of inverter 106 is alternately high and low, due to the 60 Hz supply, whereby the output thereof is a 
60 Hz square wave signal. If the input signals to pin L0 are not as they are supposed to be, the system enters lockout. 
A pair of relay coils 108 and 110 are connected in parallel with each other across secondary winding 48 through 

55 limit device 70 and thermostat 72. Relay coil 108 controls the set of normally-closed relay contacts 88 and a set of 
normally-open relay contacts 112, shown in FIG. 1C, and relay coil 110 controls a set of normally-closed relay contacts 
114 and a set of normally-open relay contact 116. When gas flow to burner 28 is desired, relay coils 108 and 110 are 
energized, causing their normally-open contacts 1 1 2 and 1 1 6 to close. With contacts 1 02 and 1 1 6 closed, valve windings 
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38 and 40 are energized, causing valves 32 and 34, respectively, to open. A filter capacitor C13 and a resistor R28 
are connected in series across valve windings 38 and 40. One end of resistor R28, one end of valve winding 38, and 
one end of valve winding 40 are connected to common C which is grounded at 118. 

Relay coil 108 is connected in series with a rectifier CR9, a resistor R29 and a NPN transistor Q7. A filter capacitor 

5 C 14 is connected between common C and the junction 120 of rectifier CR9 and resistor R29. A capacitor C15 is 
connected in parallel with relay coil 108. The base of transistor Q7 is connected through the emitter-collector circuit of 
an NPN transistor Q8 and a resistor R30 to the +15 volt power source. The base of transistor Q8 is connected through 
a resistor R31 and a capacitor C16 to pin L1 of microcomputer M1. A rectifier CR10 is connected between the base 
of transistor Q8 and common C. A registor R32 is connected between the base of transistor Q8 and common C, and 

10 a resistor R33 is connected between the base of transistor Q7 and common C. Resistors R32 and R33 provide a path 
for any leakage current from transistor Q8 and Q7, respectively, to common C. 

When energizing of relay coil 108 is desired, microcomputer M1 provides a high frequency digital signal, 1 K Hz in 
the preferred embodiment, at pin L1 . The high portion of the signal passes through capacitor C1 6, resistor R31 , the 
base-emitter circuit of transistor Q8 and the base-emitter circuit of transistor Q7, turning on transistors Q8 and Q7. 

is With transistor Q8 on, the +15 volt power source provides additional bias current to transistor Q7. With transistor Q7 
on, relay coil 108 is energized, causing its normally-open contacts 112 to close, and capacitor C15 charges through 
resistor R29. During the low portion of the signal, capacitor.C16 discharges through rectifier CR10 and resistor R31, 
causing transistors Q8 and Q7 to turn off. With transistor Q7 off, capacitor C15 discharges through relay coil 108 so 
as to keep relay coil 108 energized until transistor Q7 is again turned on. The charging and discharging time constants 

20 of capacitor C1 5 are such that transistor Q7 must be operated at a frequency considerably greater than 60 Hz to effect 
energizing of relay coil 108. Specifically, when transistor Q7 is biased on, capacitor C15 is charged, but only partially. 
It requires a number of on-off cycles of transistor Q7 to effect full charging of capacitor C15. Such a partial charge is 
sufficient to maintain relay coil 108 energized on discharge of capacitor C15 when the off time of transistor Q7 is very 
short, as it is when the signal is considerably greater than 60 Hz. However, if the signal were, for example, 60 Hz, the 

2S off time of transistor Q7 would be too long, allowing capacitor C15 to discharge to a voltage level no longer capable 
of maintaining energizing of relay coil 108. 

The 1 K Hz signal is preferably applied only during a small portion of the time during which relay coil 1 08 is energized. 
This small portion of time is the ignition activation period (IAP) during which igniter 26 is energized and gas is flowing 
to burner 28. After the IAP, the signal is changed to a lower frequency signal, such as 250 Hz, which still ensures 

30 continued energizing of relay coil 1 08 but effects a desired reduction in the effective voltage across relay coil 1 08. Such 
a reduced voltage across relay coil 108 prevents overheating of relay coil 108. 

When energizing of relay coil 108 is not desired, microcomputer M1 provides a constant low at pin L1 . When the 
signal at pin L1 is low, transistors Q8 and Q7 are off. 

Relay coil 110 is connected in series with a rectifier CR11 , a resistor R34, and an NPN transistor Q9. The base of 

35 transistor Q9 is connected through a resistor R35 to pin L2 of microcomputer M1. A capacitor C1 7 is connected between 
the base of transistor Q9 and common C to filler out any high frequency signals, such as signals at the frequency of 
ceramic resonator 94, which may, due to a fault condition, appear at pin L2. A rectifier CR1 2 is connected across relay 
coil 110, and a capacitor C1 8 is connected between common C and the junction 122 of relay coil 110 and resistor R34 
to perform the same functions for relay coil 110 as performed by rectifier CR6 and capacitor C11 for relay coil 66. When 

40 energizing of relay coil 110 is desired, microcomputer M1 provides a constant digital high signal at pin L2, which high 
signal biases on transistor Q9. With transistor Q9 on, relay coil 110 is energized and effects closing of its normally- 
open contacts 116. When energizing of relay coil 110 is not desired, microcomputer Ml causes pin L2 to remain low. 

It is believed to be a sign ificant safety feature that transistor Q7 requires a high frequency digital signal and transistor 
Q9 requires a constant digital high signal to enable them to be conductive. It is believed extremely unlikely that any 

45 malfunction of microcomputer M1 could cause such diverse signals to develop at different bits (1 and 2) of a single 
port(L). 

The provision of two sets of normally-open relay contacts 112 and 116, connected in series, provides a desired 
redundancy in controlling operation of valves 32 and 34. To ensure the existence of such redundancy, relay contacts 
112 and 116 are checked during each burner cycle. To enable such checking, a relay contact checking circuit 124, 

50 illustrated in FIG. 1C, is provided. 

Circuit 124 includes resistors R36 and R37 connected in series between common C and the junction 126 of relay 
contacts 116 and valve windings 38 and 40, and an inverter 128 having its input connected to the junction 130 of 
resistors R36 and R37 and its output connected to pin G6 of microcomputer M1. In a program for checking relay 
contacts 112 and 116, microcomputer M1 provides the 1K Hz stgnai aTpin Ll7 which signal causes relay coil 108 to 

55 be energized. With relay coil 108 energized, its controlled contacts 112 close. Concurrently, the signal at pin L2 of 
microcomputer Ml is kept low so that relay coil 110 remains de-energized. With relay coil 110 de-energized, its con- 
trolled contacts 116 remain open. With contacts 112 closed and contacts 116 open, the input of inverter 128 is bw so 
that its output is high. Microcomputer M1 checks the signal at pin G6 at the voltage peaks of the voltage across sec- 
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ondary winding 48. A high signal at pin G6 indicates that contacts 116 are open, as they should be. If contacts 116 
were erroneously closed, for example, due to being welded together, the inputof inverter 128 would be high so that 
its output would be low. A low signal at pin G6 would be detected, causing microcomputer M1 to effect system lockout. 
Microcomputer M1 then provides the constant digital high signal at pin L2, which signal causes relay coil 110 to be 

5 energized, thus causing contacts 116 to close. Concurrently, microcomputer M1 provides a constant digital high signal 
at pin L1, which signal is blocked by capacitor C16, thus providing a check of capacitor C16. With no signal being 
applied to transistors Q8 and Q7, relay coil 108 is de-energized, thus causing contacts 112 to open. Microcomputer 
M1 checks the signal at pin G6. A high signal at pin G6 indicates that contacts 112 are open, as they should be. A low 
signal would indicate that contacts 112 were erroneously closed. Again, a low signal would cause microcomputer M1 

10 to effect system lockout. 

Since a high signal at pin G6 could also be due to a fault in relay contact checking circuit 124, such fault being, 
for example, a shorted resistor R37 which would place the input of inverter 128 at common C potential, there is also 
a program for checking the integrity of checking circuit 124. Specifically, when both sets of relay contacts 112 and 116 
close to initiate energizing of valve windings 38 and 40, microcomputer M1 checks the signal at pin G6. Under this 

15 condition, the signal at pin G6 must be a digital square wave. If the signal is not a square wave, either one or both of 
the sets of relay contacts 112 and 116 are open or checking circuit 124 is defective; in either case, the system enters 
lockout. 

Referring to FIG. 1C, flame detect circuit 46 includes a capacitor C19 and a resistor R38 connected in parallel 
between the +5.6 volt power source and the input of an inverter 1 32, and a capacitor C20 and a resistor R39 connected 
20 in parallel between the +5.6 volt power source and the input of an inverter 134. The outputs of inverters 132 and 134 
are connected to pins G3 and G2, respectively, of microcomputer M1 . The inputs of inverters 1 32 and 1 34 are connected 
to resistor R4. 

In reference to inverter 132, when burner flame 42 is absent, capacitor C1 9 is alternately charged and discharged 
by the 120 volt power source and the +5.6 volt power source through capacitor C1 and resistors R1 , R3, and R4. The 

25 values of resistors R1 , R2, and R3 and capacitor C19 are such that the net charge on capacitor C19 changes very 
little whereby the input of inverter 132 remains essentially at the +5.6 volt power source potential. With the input of 
inverter 132 high, the output thereof is low. When burner flame 42 is present, current flows through the burner flame 
42. Due to flame rectification, a well know principle, more current flows through burner flame 42 on one polarity of the 
120 volt power source voltage than on the reverse polarity. Specifically, during the half-cycle when the greater value 

30 of current flows, the circuit through resistor R2, flame probe 44, burner flame 42, and burner 28 to ground 30, acts as 
a shunt, reducing the charging of capacitor C1 9 to a value less than is effected when burner flame 42 is absent. When 
the polarity of the 120 volt power source reverses, the +5.6 volt power source is effective to charge capacitor C1 9 so 
that the net charge on capacitor C19 causes the input of inverter 1 32 to be low With the input of inverter 132 low, the 
output thereof is high. Invertor 134 functions in the same manner. 

35 Thus, when burner flame 42 is absent, the outputs of inverters 132 and 134 are low; when burner flame 42 is 

present, the outputs are high. MicrocomputerMljsjsrojjr^^ monitor pins G3 and G2 so as to determine whether 
burner flame 42 is absent or present" , ~&r^Joprov\6e for various system functions, as will hereinafter be described, in 
response to such monitoring. It is to be noted that microcomputer M1 is programmed to require that the signals on pins 
G3 and G2 must always be the same, that is, both pins G3 and G2 must be high or both must be low. If the signals 

40 are not the same, the system enters lockout. This redundancy enhances the safety of the system. 

Referring to Fig. 1C, it is required that igniter 26 be capable of igniting the air-gas mixture when the applied 120 
volt alternating current power source voltage, hereinafter referred to as line voltage, is as low as 97 volts or as high as 
132 volts. 

/ A particular characteri stic of siljcon nitride igniter 26 is that if the temperature of igniter 26 is high enought to ignite 
45 1 the air-gas mixture with a line volSge^bT97Volts across it, the temperature would exceed an allowable maximum value 
/ at an applied line voltage of 1 32 volts. Specifically, it has been determined that a temperature of approximately 2000°F. 
/ must be attained by igniter 26 to reliably ignite the air-gas mixture. If this temperature is attained with an applied line 
voltage of 97 volts, the temperature of igniter 26 at 132 volts would be excess of 2400°F., which is the maximum 
temperature igniter 26 can withstand. At temperatures higher than 2400°F., the tungsten heater element in igniter 26 
50 begins to melt, causing igniter failure. 

It has been determined that igniter 26 can be safely and reliably operated when the temperature of igniter 26 is 
below approximately 2325°F. It has also been determined that, due to manufacturing tolerances, the temperature 
variation from one igniter to another in a production lot can be approximately 300°F. Thus, if igniter 26 is designed for 
operation at 2175 P F., the midpoint of the temperature tolerance span, the maximum temperature of igniter 26 would 
55 be 2325°F. and the lowest temperature would be 2025*F., which lowest temperature is still high enough to ignite gas. 

Igniter 26 is so constructed that an applied voltage of 80 volts to igniter 26 will enable igniter 26 to attain and/or 
maintain a temperature of approximately 2175°F. (The tolerance on the temperature is 2000°F. to 2325°F. as stated 
above.) To provide a constant 80 volt source to igniter 26, use is made of the known formula 
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V= </E 2 xNx1/f, 



wherein V = desired voltage (RMS) across igniter 26; E = available voltage (RMS) to igniter 26, N = number of line 
voltage cycles that igniter 26 is to be on during a one-second period; and f = line frequency. As will hereinafter be 
described, circuit means are provided to measure the voltage available to igniter 26 and determine, in accordance with 
the formula, the number of line voltage cycles required to provide a constant 80 volt source to igniter 26. 

While an applied voltage of 80 volts to igniter 26 will enable it to attain ignition temperature, it is preferable that a 
higher voltage be initially applied so as to cause a rapid initial heating of igniter 26 to ignition temperature, and then 
the voltage be reduced to maintain the ignition temperature. Specifically, the system provides for applying full line 
voltage to igniter 26 for a short period of time, hereinafter referred to as warm-up time, which time is dependent upon 
the value of the measured voltage across igniter 26 and which has been determined to be of such duration that, at the 
end of such time, igniter 26 will be at the desired ignition temperature. Thereafter, igniter 26 is energized only during 
a portion of the line voltage cycles, in accordance with the formula, so as to reduce the effective voltage across igniter 
26 to a value adequate to maintain ignition temperature. 

However, in addition to being dependent upon the value of the applied voltage, the temperature of igniter 26 is 
also dependent upon other factors. Such factors include environmental conditions such as the ccolinjj_effect caused 
by the flow of air qt air-g as mixture past the igniter 26, and various characteristics of igniter 26, which characteristics 
vary due to manufacturing tolerances. Accordingly, as will hereinafter be described, the system of the present invention 
includes means for a djusting the length of the warm-up time period a nd the determined number of line voltage cycles 
that igniter 26 is on during a 1 second period, sometimes referred to as the duty cycle or degree of modulation, so as 
to compensate for such factors, and by so compensating, to establish the lowest possible operating temperature of 
igniter 26 and thereafter operate igniter at a desired temperature above the lowest possible operating temperature and 
well below the maximum allowable temperature so as to increase the effective life of igniter 26. 

Referring to FIG. 1 C, a voltage sensing circuit is shown generally at 1 36. Sensing circuit 1 36 includes a differential 
amplifier A1 having its non-inverting input pin connected through resistors R40 and R41 to one side of igniter 26 and 
through a resistor R42 to common C. The inverting input pin is connected through resistors R43 and R44 to the other 
side of igniter 26 and through a feedback resistor R45 to the output of amplifier A1. The output of amplifier A1 is 
connected to the inverting input pin of a comparator A2. The non-inverting input pin of comparator A2 is connected 
through a resistor R46 to the +15 volt power source. A zener diode VR4 is connected between the non-inverting input 
pin and common C to provide a constant voltage of +4.7 volts on the non-inverting input pin. The output of comparator 
A2 is connected through a resistor R47 to a junction 1 38 of resistors R48 and R49. Resistor R48 is connected between 
junction 138 and pin G5 of microcomputer M1. Resistor R49 is connected between junction 138 and common C. A 
rectifier CR13 is connected between junctions 138 and common C. A rectifier CR14 and a resistor R50 are connected 
in series between junction 1 38 and one side of igniter 26. 

A function of sensing circuit 136 is to provide to microcomputer M1 a parameter indicative of the value of the 
voltage applied across igniter 26. When triacs Q1 and Q2 are conducting and the line voltage is in the half-cycle in 
which terminal 1 4 is positive with respect to terminal 1 6, the output of amplifier A1 becomes increasingly more positive 
as the sinusoidal line voltage increases from zero toward its maximum value. The values of resistors R40 through R45 
are such that when the instantaneous value of the voltage across igniter 26 becomes greater than 115 volts, the output 
of amplifier A1 becomes sufficiently higher than +4.7 volts so as to cause the output of comparator A2 to become low. 
This low signal is detected at pin G5 of microcomputer M1. The output of comparator A2 remains low until the instan- 
taneous value of the voltage across igniter 26 decreases to a value less than 115 volts, at which time the output of 
amplifier A1 becomes sufficiently less than +4.7 volts so as to cause the output of comparator A2 to become high. The 
high signal is detected at pin G5 of microcomputer M1 . Resistors R47 and R49 function as a voltage divider to insure 
that the +15 volt output of comparator A2 will be reduced to +5.6 volts at junction 138 so as to provide a desirable 
value of the high signal to pin G5. 

In response to the time at which pin G5 goes low and the time at which pin G5 goes high, microcomputer M1 
determines the duty cycle or degree of modulation, that is, the number of line voltage cycles that igniter 26 must be 
on during a one-second period. For example, suppose the above-described times sensed by pin G5 define that the 
available voltage (E) to igniter 26 is 118 volts. If the frequency (f) is 60 Hz and the desired voltage across igniter 26 
(V) is 80 volts, the duty cycle (N), in accordance with the formula, 



should be 28. As will hereinafter be described more fully, microcomp uter M1 also determines the length of the warm- 
up time period based on the value of the duty cycle. In the preierred emoodiment, microcomputer M1 determines the 
duty cycle by utilizing lo ok-up tables in ROM, which tables are consistent with the formula. It is to be understood that 
microcomputer M1 could alternately determine the duty cycle by calculation. 
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During the reverse polarity, when the line voltage is in the half-cycle in which terminal 14 is negative with respect 
to terminal 1 6, current is pulled from the non-inverting input pin of amplifier A1 . When the output of amplifier A1 becomes 
sufficiently higher than +4.7 volts, the output of comparator A2 goes low so that the signal at pin G5 is low When the 
instantaneous value of the voltage across igniter 26 decreases to approximately -20 volts, rectifier CR14 begins to 
5 conduct. With rectifier CR14 conducting, rectifier CR1 3 is biased into conduction, forcing junction 1 38 to be at approx- 
imately 0.6 volts (the voltage drop across rectifier CR1 3) below the potential of common C, whereby the signal at pin 
G5 remains low. The signal at pin G5 subsequently goes high when the voltage across igniter 26 increases to approx- 
imately -20 volts. 

Microcomputer M1 executes the above described determination of the duty cycle for 3 seconds, beginning at the 

10 start of the warm-up time period. During the remainder of the warm-up time period, microcomputer M1 checks that 
triacs Q1 and Q2 are functioning properly and that igniter 26 is connected and/or is not open. To effect such function, 
microcomputer M1 is programmed to check, during the remainder of the warm-up time period, the status of pin G5 
when the instantaneous value of the voltage across igniter 26 is at its maximum value during both the positive and 
negative half -cycles. In view of the above description of the status of pin G5 during the determination of the duty cycle, 

is it will be apparent that the signal at pin G5 must be low at the positive and negative peak voltage values. If the signal 
is not low, either one or both of triacs Q1 and Q2 are half-waving or are shorted, or igniter 26 is not connected or is 
open. If the signal is not low, the system enters lockout. 

Triac Q1 is controlled by an opto-triac driver 140 which comprises an LED 1 (light emitting diode) and atriac Q10. 
One of the main terminals of triac Q10 is connected to one of the main terminals of triac Q1 through a resistor R51. 

20 The other main terminal of triac Q10 is connected to the gate terminal of triac Q1 and through a resistor R52 to the 
other main terminal of triac Q1 . The anode of LED 1 is connected to the +1 5 volt power source. The cathode of LED 
1 is connected through a resistor R53 to the collector of an NPN transistor Q11 . The emitter of transistor Q11 is con- 
nected to common C. The base of transistor Q11 is connected through a resistor R54to pin D2 of microcomputer M1. 
A capacitor C21 is connected between the base of transistor Q1 1 and common C to filter out any h igh frequency signals, 

2S such as signals at the frequency of ceramic resonator 94, which may erroneously appear at pin D2. 

When conduction of triac Q1 is desired, microcomputer M1 provides a 120 Hz signal at pin D2 comprising a digital 
high portion of approximately 833 microseconds and a digital low portion lor the remainder of each half-cycle of the 
60 Hz line voltage wave-form. The high portion of the 120 Hz signal is initiated at or near the zero crossovers of the 
line voltage wave-form. When the signal at pin D2 is high, transistor Q11 is biased on, causing LED 1 to be energized. 

30 With LED 1 energized, triac Q10 is gated on. With triac Q10 on, triac Q1 is gated on. Once gated on at the beginning 
of each half-cycle, triac Q1 remains conductive during the remainder of each half-cycle. The brief duration of the on 
time of transistor Q11 reduces the power drain from the +15 volt power source. When conduction of triac Q1 is not 
desired, microcomputer M1 holds pin D2 at a constant digital low. 

Triac Q2 is controlled by an opto-triac driver 142 which comprises an LED 2 and a triac Q12. One of the main 

os terminals of triac Q12 is connected to one of the main terminals of triac Q2 through a resistor R55. The other main 
terminal of triac Q1 2 is connected to the gate terminal of triac Q2 and through a resistor R56 to the other main terminal 
of triac Q2. The anode of LED 2 is connected to the +1 5 volt power source. The cathode of LED 2 is connected through 
a resistor R57 to the collector of an NPN transistor Q13. The emitter of transistor Q1 3 is connected to common C. The 
base of transistor Q1 3 is connected through a resistor R58 to common C, and through a capacitor C22 and a resistor 

40 R59 to pin D3 of microcomputer M1 . 

When conduction of triac Q2 is desired, microcomputer Ml provides, at pin D3, the same 120 Hz signal as previ- 
ously described for controlling triac Q1 . Capacitor C22 is effective to block any constant digital high signal that may 
erroneously appear at pin D3. When conduction of triac Q2 is not desired, microcomputer M1 holds pin D3 at a constant 
digital low. 

45 Triacs Q1 and Q2 are checked to determine that they are functioning properly. Not only are they checked during 

the time that igniter <26 is energized, in the manner previously described, they are also checked prior to energizing of 
igniter 26. 

Specifically, prior to the time at which energizing of igniter 26 is initiated, microcomputer M1 provides the previously 
described 120 Hz signal at pin D2 to effect conduction of triac Q1 . Concurrently, microcomputer M1 provides a constant 
so digital high at pin D3. Pin G5, which is connected to junction 138, is monitored. Since capacitor C22 is initially dis- 
charged, a constant digital high at pin D3 will cause transistor Q13 to be biased on, thus effecting conduction of triac 
Q2. However, after one half -cycle, capacitor C22 will be charged, thus blocking the constant digital high and preventing 
further conduction of transistor Q13. Because of this check of capacitor C22, monitoring of pin G5 is delayed for at 
least one half-cycle. 

ss During the half -cycle in which terminal 14 is positive with respect to terminal 16, the output of amplifier A1 remains 

at common C potential. Under this condition, the output of comparator A2 is high so that pin G5 is high. Pin G5 is 
checked when the instantaneous value of the line voltage is at its maximum value. During the reverse polarity half- 
cycle, the current flow through rectifiers CR13 and CR14 and resistor R50 pulls the output of comparator A2 low. 
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However, the current flow is insufficient to hold in triac Q1 . With triac Q1 off, the output of comparator A2 becomes 
high so that pin G5 is again high. It is to be noted that pin G5 is monitored when the instantaneous value of the line 
voltage is at its maximum negative value so that the momentary low at pin G5 will not be detected. In view of the 
previously described check of triacs Q1 and Q2 performed when igniter 26 is energized, it should be apparent that a 

5 monitored low at pin G5, with triac Q2 biased off, would indicate that triac Q2 is shorted or half-waving. Accordingly, if 
the signal at pin G5 is low, the system enters lockout. 

In a similar manner, microcomputer M1 then checks triac Q1. Specifically, microcomputer M1 provides the previ- 
ously described 120 Hz signal at pin D3 to effect conduction of triac Q2, and provides a constant digital low at pin D2 
to prevent conduction of triac Q1 . During both half-cycles of the line voltage, there is no current flow through sensing 

10 circuit 136: Under this condition, the output of comparator A2, and thus the signal at pin G5, is a constant high. A 
monitored low at pin G5, with triac Q1 biased off, would indicate that triac Q1 is shorter or half-waving. If the signal at 
pin G5 is low, the system enters lockout. 

When the line voltage source at terminals 14 and 16 is 120 volts, the use of the two triacs Q1 and Q2 provides 
redundancy. If the line voltage were 240 volts, triacs Q1 and Q2, by virtue of being connected to opposite sides of 

is igniter 26, provide the desired function of electrically disconnecting igniter 26 from both sides of the 240 volt power 
source. 

A plurality of resistors R60 through R67 are shown in FIG. 1B, some of which are connected to various pins of 
microcomputer M1 and others of which, as indicated by dashed lines instead of solid lines, are not connected. An 
internal pull-up resistor is associated with each of the various pins to cause them to be normally high. The connection 

20 or non-connection of resistors R60 through R67 is determined by the specific system operation desired. 

For example, in the program of microcomputer M1, a post-purge time period of, for example, 5 seconds is provided 
in the basic program logic. In some systems, a longer post-purge time period of, for example, an additional 15 seconds, 
is desired. A digital high at pin 10 enables such an additional post-purge timing and a digital low disenables such timing. 
With resistor R60 connected between pin 10 and common C, pin 10 would be low and the additional post-purge timing 

2S would be disenable. With resistor R60 not connected, pin 10 is high, enabling the additional post-purge timing. Since 
the preferred embodiment of the present invention utilizes the additional post-purge timing, resistor R60 is shown as 
not being connected. Therefore, the reason for illustrating non-connected resistor R60 and other non-connected re- 
sistors is to describe more fully the versatility of the system of the present invention. 

The connection or non-connection of resistor R61 to pin 11 determines whether microcomputer Ml will monitor the 

30 inducer pressure switch 102. If resistor R61 were connected, no monitoring would occur; with resistor R61 not con- 
nected, as shown in FIG. 1 B, monitoring will occur. 

The connection or non-connection of resistor R62 to pin 12 establishes a desired value of an initial offset to the 
initial duty cycle as will hereinafter be described. Resistor R62 is shown as being connected. The connection or non- 
connection of resistor R63 to pin 13 determines how the system can exit the lockout condition. With resistor R63 not 

35 connected, as shown in FIG. 1 B, the system can exit the lockout condition only by disconnecting the system from the 
power source at terminals 14and 16andthen re-connecting the system. If resistor R63 were not connected, the lockout 
condition could be exited, if the contacts of limit device 70 are closed, by opening and then re-closing thermostat 72. 

Resistor R64 is connected or not connected to pin L7 to establish even parity with resistors R60 through R63, and 
R65 through R67. As shown in FIG. 1B, resistor R64 is connected. If parity is wrong, the system enters lockout. 

40 The connection or non-connection ol resistor R65 to pin L6 establishes a desired trial for ignition time period. With 

resistor R65 not connected, as shown in FIG I B, the time period is 4 seconds. If resistor R65 were connected, the time 
period would be 7 seconds. 

The connection or non-connection of resistors R66 and R67 to pins L5 and L4, respectively, establishes a desired 
pre-purgetime period. With neither resistor R66 nor R67 connected, as shown in FIG. 1B, the time period is 30 seconds. 

45 |f only resistor R66 were connected, the time period would be 1 7 seconds; if only R67 were connected, the time period 
would be 20 seconds; and if both resistors R66 and R67 were connected, there would be no pre-purge. 

Referring to FIG. 1 B, the anode of an LED 3 is connected to the +5.6 volt power source, and the cathode thereof 
is connected through a resistor R68 to pin DO of microcomputer M1. Microcomputer M1 effects energizing of LED 3 
whenever the system is in lockout and effects energizing in such an manner that the cause of the lockout can be 

so generally determined. Specifically, microcomputer M1 causes LED 3 to flash on and off at a visibly detectable rate, 
such as 1 Hz, should lockout occur as a result of the depletion of the allowable number of recycles or retries. Should 
lockout occur as a result of various hardware or software failures, microcomputer M1 causes LED 3 to flash on and 
off in a coded manner and at such a rate that LED 3 appears to be continuously on. Such coded flashing of LED 3 can 
be read by a diagnostic tool (not shown) so as to determine more specifically the cause of the lockout. 

55 Microcomputer M1 is programmed to provide system operation in a manner illustrated, in simplified form, in the 

flow chart of FIGS. 2 A through 21. 

Referring to FIG. 2A, when electrical power is applied to the system, microcomputer M1 performs a control check 
which includes self-checks of ROM and RAM and a check of the CPU. If the check indicates that there is a malfunction 
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in microcomputer Ml, the system enters a halt condition wherein further system operation is prevented. It the control 
check indicates that microcomputer M1 is functioning properly, microcomputer M1 executes initialization which, among 
other functions, causes all timers to be set to zero, and causes all ports to be in such modes so that all connected 
devices are de-energized. The program then advances to an inquiry of whether there is a call for heat. This inquiry 

5 may be the first such inquiry after initialization or it may be an inquiry subsequent to a previous successful or unsuc- 
cessful burner cycle which returned the program to the point in the program illustrated as START 

A call for heat requires that the contacts in both limit device 70 and thermostat 72 be closed. As previously de- 
scribed, when the contacts in both limit device 70 and thermostat 72 are closed, a call for heat is indicated by the 
generation of a square wave signal by inverter 84, which square wave signal then appears at pin G1 of microcomputer 

10 Ml. Thus, if there is no call for heat, the reason for there being no call for heat is that the contacts of either or both 
limit device 70 and thermostat 72 are open. 

If there is no call for heat, the next logic inquiry is whether flame 42 is present. Normally, flame 42 should not be 
present. If this is the first burner cycle after initialization, flame 42 has not been previously established. If there has 
been a previous burner cycle, the opening of the contacts of either limit device 70 or thermostat 72 effected de-ener- 

1$ gizing of valve windings 38 and 40 which control gas valves 32 and 34, respectively Thus, gas valves 32 and 34 should 
be closed, thereby preventing flow of gas to burner 28. If flame 42 is not present, as would be indicated by a digital 
low at pins G2 and G3, microcomputer M1 turns off inducer 18 in the event that it is on. As previously described, 
microcomputer M1 effects this function by providing a digital low at pin D1, which digital low effects de-energizing of 
relay coil 68 which controls relay contacts 20. After effecting turn off of inducer 18, microcomputer M1 checks whether 

20 the circulator blower off timer is timed out. The circulator blower off timer is an internal timer or counter in microcomputer 
M1 which is activated when flame 42 is extinguished. When the circulator blower off timer is timed out, microcomputer 
M1 turns off circulator blower 22. As previously described, microcomputer M1 effects this function by providing a digital 
low at pin L3, which digital low effects de-energizing of relay coil 66 which controls relay contacts 24. 

It should be noted that the program logic of causing the circulator 22 to run until the circulator blower off timer is 

25 timed out is executed regardless of whether this program loop is entered as a result of the opening of the contacts of 
thermostat 72 upon completion of a normal burner cycle, or the opening of the contacts of limit device 70 due to an 
abnormally high temperature in the furnace plenum. Specifically, this program loop ensures that circulator blower 22 
will run for a desired amount of time, for example, 60 seconds, after flame 42 is extinguished. Normally, flame 42 is 
extinguished due to opening of the contacts of thermostat 72. Under this condition, circulator blower 22 effects distri- 

30 bution of the conditioned air which is in the furnace plenum, until the circulator blower off timer times out. It is to be 
understood that the time period established for the circulator blower off timer is such that the timer times out before 
the temperature of the distributed air drops to an uncomfortably cool temperature. If flame 42 is extinguished due to 
opening of the contacts of limit device 70, such opening being due to an abnormally high plenum ajr temperature 
caused by, for example, a clogged filter in the air distribution system, circulator blower 22 distributes the plenum air 

35 until the circulator blower off timer times out. Under this condition, it is believed that the time period established by the 
circulator blower off timer is sufficiently long to ensure that the circulator blower 22 is effective to cause the plenum air 
temperature to cool to an acceptable value. 

If there is no call for heat and flame 42 is present, as would be indicated by a digital high at pins G2 and G3, flame 
42 would be present due to a previous burner cycle. Specifically, if flame 42 is present, it would be present either 

40 because gas valves 32 and 34 have not yet closed due to an inherent slow-closing construction, or because both gas 
valves 32 and 34 are leaking a sufficient amount of gas past their valve seats to maintain a flame 42 of sufficient 
magnitude to be detected by flame probe 44. Regardless of the reason that flame 42 exists, the program advances to 
an inquiry as to whether inducer 18 and circulator blower 22 are on. If they are not on, microcomputer M1 turns them 
on by providing a digital high at pins L3and D1 to effect energizing of relay coils 66 and 68 which, in turn, effect closing 

45 of relay contacts 24 and 20, respectively 

With inducer 18 and circulator blower 22 on, microcomputer M1 then sets an internal 2 second flame failure re- 
sponse time (FFRT) timer and starts an internal 30 second timer. The existence of flame 42 is checked during this 30 
second time period. The 2 second FFRT timer necessitates flame 42 being absent for 2 seconds before flame 42 will 
be determined to be absent as indicated by a low at pins G2 and G3. Such a 2 second timer ensures that microcomputer 

50 M1 will not falsely interpret a momentary flame flicker or momentary non-impingement of flame probe 44 as an indication 
of the absence of flame 42. If absence of flame 42 is detected within the 30 second time period, the circulator blower 
off timer is started. Subsequently, microcomputer M1 effects turning off of inducer 18 and, after the circulator blower 
off timer is timed out, the burning off of circulator blower 22. 

If flame 42 still exists at the end of the 30 second time period, the apparent reason for flame 42 is that gas valves 

55 32 and 34 are leaking. Under this condition, the system enters lockout, a condition illustrated in FIG. 21. In lockout, 
whether the lockout is caused by this condition or any other condition hereinafter described, microcomputer M1 provides 
the required signals to turn on inducer 18, turn on circulator blower 22, close gas valves 32 and 34, turn off igniter 26, 
and energize LED 3. When the system enters lockout due to gas valves 32 and 34 leaking, it is apparent that flame 
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42 will continue to exist. However, it should be noted that because gas valves 32 and 34 are in series, the likelihood 
of both gas valves 32 and 34 leaking sufficiently to sustain flame 42 is extremely remote. It should also be noted that 
while the use of LED 3 is preferred as an indication of system lockout, other means, such as an audible buzzer, could 
be used in lieu of or in addition to LED 3. As previously described, with resistor R63 not connected, as shown in FIG. 

5 1B, the system can exit lockout by disconnecting the system from the power source at terminals 14 and 16 and then 
reconnecting the system. It is strongly recommended that, before reconnecting the system, the cause of the lockout 
condition be determined and corrected. 

Referring again to FIG. 2A, if there is a call for heat, the next logic inquiry is whether a 30 second thermostat off 
timer is timed out. As will hereinafter be described, this timer, which is an internal timer or counter in microcomputer 

10 M1, is activated when a call for heat is terminated. The timer prevents initiation of a new burner cycle immediately after 
thermostat 72 has opened to terminate a previous burner cycle. 

Referring to FIG. 2B, when the thermostat off timer is timed out, microcomputer M1 again performs various checks 
of ROM, RAM, and CPU, and causes lockout if the checks indicate a malfunction. This check is executed after the 
point START in the program logic so that it is executed on each call for heat. Accordingly, this check is different from 

15 the initial check performed one time immediately after initialization. For example, RAM is checked in such a manner 
that various data therein remains intact. 

If the control check indicates that microcomputer M1 is functioning properly, it starts an internal 30 second pressure 
switch timer. Microcomputer M1 then checks the status of pin L0 to determine whether the contacts of pressure switch 
102 are open. As previously described, when the contacts of pressure switch 102 are open, the signal at pin L0 is high; 

20 when closed, the signal at pin L0 is a 60 Hz square wave. Inducer 18 should be deenergized at this time, so that the 
contacts of switch 102 should be open, If the contacts of switch 102 are still closed at the end of the 30 second time 
period, the system enters lockout. A failure to open could be due to relay contacts 20 being welded closed so as to 
effect continued energizing of inducer 18, or due to a defect in pressure switch 102 which prevents its contacts from 
opening. 

25 |f the contacts in pressure switch 102 are open, microcomputer M1 then turns on inducer 18 and starts an internal 

30 second pressure switch timer. Microcomputer M1 then checks the status of pin L0 to determine whether the contacts 
of pressure switch 102 subsequently close. If the contacts of switch 102 fail to close within the 30 second time period, 
the system enters lockout. A failure to close could be due to a number of causes, such as a defective motor in inducer 
18, a defective pressure switch 102, a defective relay coil 68, or a defect in the circuit that drives relay coil 68. 

30 When the contacts in pressure switch 102 close, the next logic inquiry is whether this burner cycle is a retry. (Retry 

will hereinafter be described). If the present burner cycle is not a retry, microcomputer M1 checks pins L4 and L5 to 
determine the time duration, if any, of pre-purge. As previously described, a digital high at pins L4 and L5, due to non- 
connection of resistors R67 and R66, respectively, establishes a pre-purge time of 30 seconds. Accordingly, micro- 
computer M1 effects energizing of inducer 18 for 30 seconds before advancing in the program. This pre-purge time 

35 enables inducer 1 8 to force out any accumulated unburned fuel or products of combustion from the combustion chamber 
of the furnace. As illustrated in FIG. 2A, if the present burner cycle is a retry, pre-purge is by-passed. 

Referring to FIG. 2C, microcomputer M1 then checks whether flame 42 is present. This check ensures safe system 
operation in the event of a momentary power interruption during a normal burner cycle. Specifically, if gas valves 32 
and 34 are slow-closing valves, and if there where no or insufficient pre-purge selected, a momentary power failure 

40 will de-energize valve windings 38 and 40, but valves 32 and 34 will remain open for a period of time. When power is 
resumed, there is still a call for heat. However, because the thermostat off timer was never activated, and because 
there may be no or insufficient pre-purge, there may have been insufficient time for flame 42 to extinguish. Therefore, 
in the event that flame 42 is present at this particular time in the program, microcomputer M1 starts an internal 30 
second timer and (not shown) sets a 2 second flame failure response time (FFRT) timer. If flame 42 is no longer detected 

45 before the 30 second timer times out, the program advances; if flame 42 is still detected when the 30 second timer 
times out, a condition most likely due to leaking gas valves 32 and 34, the system enters lockout. 

When flame 42 is not present, microcomputer M1 then checks relay contacts 112 and 116 and triacs Q1 and Q2 
as previously described. If the checks disclose a malfunction, the system enters lockout. If the checks indicate no 
malfunctions, the program advances. 

50 Microcomputer M1 then turns on triacs Q1 and Q2 so as to enable energizing of igniter 26, and concurrently, starts 

an internal igniter warm-up timer. As previously described, microcomputer M1 effects such turn on by providing a 120 
Hz signal at pins D2 and D3. Triacs Q1 and Q2 are gated on each half-cycle of the 60 Hz line voltage so that igniter 
26 is energized during each cycle of the line voltage. 

Concurrently, microcomputer M1 measures voltage across igniter 26. As previously described, such measuring is 

55 effected by monitoring of pin G5. Based on such measured voltage, and in accordance with the formula 

V= Je 2 xNx1/i, 
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microcomputer M1 determines the number ot line voltage cycles that igniter 26 should be on, that is, the duty cycle, 
to effect the application of 80 volts across igniter 26. Microcomputer M1 effects this determination constantly during a 
3 second time period. It is to be noted that igniter 26 is energized during each line voltage cycle during this 3 second 
time period. 

As previously described, it has been determined that an applied voltage of 80 volts to igniter 26 will enable igniter 
26 to attain and/or maintain a desired temperature of approximately 2175°F. However, due to tolerances in the man- 
ufacturing of igniter 26, and due to variations in the environment of igniter 26 in the application, it is necessary to adjust 
this BO volt parameter. 

Specifically, the duty cycle determined by microcomputer M1 in accordance with the formula 



V= VE 2 xNx1/f, 

is based on V being equal to 80 volts. This determined duty cycle is identified as duty cycle N 0 . To compensate for the 
above mentioned tolerances and variations, microcomputer M1 determines an instant duty cycle, identified as duty 
cycle N v which is to be utilized in the present or instant burner cycle when duty cycling or modulation of igniter 26 is 
to begin. Specifically, microcomputer M1 determines the instant duty cycle N 1 by adding an offset value to the duty 
cycle N 0 . Thus, when igniter 26 is duty cycled, the voltage across igniter 26 is not necessarily a constant voltage of 80 
volts. Additionally, microcomputer M1 utilizes the offset value to determine the length of the warm-up time period. As 
will hereinafter be described more fully, this offset value functions to provide a learning routine so as to enable the 
eventual establishing of a desired operating temperature of igniter 26 which, preferably, is slightly above the lowest 
possible ignition temperature. 

The offset value is a count in an internal counter of microcomputer M1 which can increment to a maximum count 
value, such as 14, and decrement to a minimum count value, such as -16. The initial count value, at initialization, is 
determined by the connection or non-connection of resistor R62 to pin 12. With resistor R62 connected, as shown in 
FIG. 1 B, the initial count value is 4; if resistor R62 were not connected, the initial count value would be 9. The selection 
of one or the other of the initial count values is determined by the anticipated cooling effect on igniter 26 due to operation 
of inducer 18. It is to be noted that the cooling effect on igniter 26 can vary from furnace to furnace, depending on the 
capacity of inducer 18, the physical location of igniter 26 in the flow path of air or air- gas mixture and other such 
parameters. If the anticipated cooling effect is low, the initial count value of 4 would be chosen; if the anticipated cooling 
effect is high, the initial count value of 9 would be chosen. 

After the above 3 second time period has expired, microcomputer M1 establishes the remaining warm up time as 
being : (N-, x 11/f) - 3 seconds. For example, if the applied voltage to igniter 26 were 118 volts, the determined duty 
cycle N 0 would be 28. If this were the first duty cycle after initialization, the offset value would be 4, so that the instant 
or present duty cycle would be 28 + 4 which equals 32. The remaining warm-up time would therefore be (32 x 1 1/60) 
- 3 which equals 2.87 seconds. Thus, for an additional 2.87 seconds, igniter 26 continues to be energized during each 
line voltage cycle. 

When the additional 2.87 seconds time period begins, microcomputer M1 then checks for half-waving or shorted 
triacs Q1 and Q2 and for open or disconnected igniter 26 in the manner previously described. If the check indicates a 
malfunction, the system enters lockout. 

When the igniter warm-up time times out, microcomputer M1 initiates modulation of igniter 26 by duty cycling igniter 
26 at duty cycle . Because igniter 26 has been energized each line voltage cycle by a sufficiently high voltage and 
for a sufficiently long warm-up time period, it is at a temperature sufficiently high to ignite gas, and modulation of igniter 
26 at duty cycle N 1 is effective to maintain igniter 26 at such an ignition temperature 

While the method of modulation may take many forms, a preferred method, illustrated by an example, will now be 
described. In the above example, the duty cycle is 32. With the 60 Hz source, such a duty cycle establishes that 
the desired effective voltage across igniter 26 will be obtained if igniter 26 is energized for 32 of the 60 cycles existing 
in a 1 second time period, and de-energized for the remaining 28 cycles. The difference between the 32 "on" cycles 
and 28 "off" cycles is 4 cycles. When modulation begins, igniter 26 is energized by full line voltage for the first 4 cycles 
of the 60 cycles existing in a 1 second time period. In the remaining 56 cycles, igniter 26 is energized by alternate 
cycles of full line voltage and no voltage. Thus, 4 "on" cycles plus 28 (one half of 56) "on" cycles produces the required 
duty cycle N 1 of 32 "on" cycles. If the duty cycle were, for example, 28, igniter 26 would be energized by alternate 
cycles of full line voltage and no voltage for the first 56 cycles of the 1 second time period and, in the remaining 4 
cycles, no voltage would be applied to igniter 26. It is believed that this method of modulation minimizes thermal shock 
to igniter 26. 

Concurrent with initiating modulation, microcomputer M1 checks whether flame 42 is present. 
Flame should not be present since gas valves 32 and 34 are still closed. If flame 42 is present, both values 32 and 
34 are leaking, and the system enters lockout. 

If flame 42 is not present, microcomputer M1 sets an internal 2 second flame failure response time (FFRT) timer 
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and effects energizing of valve windings 38 and 40 so as to pull in gas valves 32 and 34, respectively. As previously 
described, when energizing of valve windings 38 and 40 is desired, relay coils 1 08 and 11 0 are energized. Specifically, 
microcomputer M1 provides the 1K Hz signal at pin L1 which effects energizing of relay coil 108, and provides the 
constant digital high signal at pin L2 which effects energizing of relay coil 110. With relay coils 108 and 110 energized, 

$ relay contacts 112 and 116, respectively, close so as to enable energizing of valve windings 3B and 40. 

In the manner previously described, microcomputer M1 then checks relay contact checking circuit 124, which 
check is also a check that both sets of normally-open relay contacts 112 and 116 are closed, and causes the system 
to enter lockout if the checks indicate a malfunction. 

Microcomputer M1 then starts an internal trial for ignition timer. As previously described, with resistor R65 not 

10 connected, as shown in FIG. 1B, the time period is 4 seconds. The temperature ol igniter 26 should be high enough 
to ignite the air-gas mixture at burner 28 so as to establish flame 42. Microcomputer M1 checks whether flame 42 is 
present, which presence would be indicated by a high at pins G2 and G3. Microcomputer M1 continues to check for a 
flame 42 until flame 42 appears or until a time period identified as the ignition activation period (I AP) has expired. The 
I AP is established by an internal counter which is initiated at the start of the trial for ignition timer. The IAP timer times 

is out at a time determined by the selected trial for ignition time. For example, with a selected trial for ignition time of 4 
seconds, the IAP times out 2 seconds after the trial for ignition timer is started. If the selected trial for ignition time were 
7 seconds, the IAP would time out 5 seconds after the trial for ignition timer is started. 

When flame 42 is detected, or if there is no flame 42 and the IAP has expired, microcomputer M1 effects de- 
energizing of igniter 26. Referring to FIG. 2D, microcomputer M1 then continues to check for the presence of flame 42 

20 until flame 42 is detected or until the 4 second trial for ignition timer times out. 

If flame 42 is detected within the 4 second trial for ignition time period, microcomputer M1 then starts an internal 
circulator blower on timer. For example, the circulator blower on timer might be set for 30 seconds. With such a timing, 
circulator blower 22 is turned on 30 seconds after flame 42 is detected so as to distribute the plenum air heated by 
flame 42. 

25 Concurrently, microcomputer M1 sets an internal flag identified as flame lit flag. This flag indicates that flame 42 

has been established. Microcomputer M1 then checks if another flag, identified as offset direction flag, has been set. 
This offset direction flag is set only if there has been an unsuccessful attempt for ignition after there has been a suc- 
cessful ignition. Specifically, if this is the first attempt for ignition since initialization or if every attempt for ignition since 
initialization has been successful, the offset direction flag is not set. Under this condition, an internal counter, identified 

30 as cycle counter, is zero, and the offset direction flag is off. Microcomputer M1 then checks if the offset count is greater 
than -16. If the offset count is greater than -16, the count is decremented by a value of 1; if the offset count is not 
greater than -16, the offset count value is left unchanged. Thus, for example, if the present burner cycle is the tenth 
cycle since initialization, and all previous 9 burner cycles have been successful, and the initial offset value was 4, the 
offset value would have decremented, by the ninth cycle, to a value of -5 which value is greater than -16. Thus, in the 

35 tenth cycle, the offset value would be further decremented to a value of -6. 

If the offset direction flag is set, the cycle counter is incremented. If the value of the cycle counter is greater than 
255, the cycle counter is set to zero and the offset direction flag is turned off. This enables the offset count value to be 
decremented. If the value of the cycle counter is not greater than 255, the program bypasses the offset decrementing 
step. As will be explained more clearly hereinafter, the cycle counter program loop provides a low rate oscillator which 

40 ensures that igniter 26 will not be locked into a higher than desired operating temperature. 

If flame 42 is not detected within the 4 second trial for ignition time period, microcomputer M1 checks if the flame 
lit flag is set. If the flame lit flag is not set, indicating that there has been no successful ignition since initialization, 
microcomputer M1 effects closing of valves 32 and 34, and the system enters a retry subroutine shown in FIG. 2G. 
In retry, microcomputer M1 increments an internal retry counter. If the count in the retry counter is 3, indicating 

45 that there have been 3 successive unsuccessful attempts at ignition, the system enters lockout. If the count is less 
than 3, microcomputer M1 sets an internal timer to provide 30 seconds of purging by inducer 18. Thus, for 30 seconds, 
inducer 18 is energized so that any unburned fuel that may have accumulated in the combustion chamber during the 
4 second trial for ignition time period is safely exhausted. When the 30 seconds expires, inducer 18 is turned off, and 
the program returns to START. 

50 |f the flame lit flag is set, indication that there has been a previous successful ignition, the offset direction flag is 

then set. Microcomputer M1 then checks if the offset count is less than 14. If the offset count is less than 14, the count 
is incremented by a value of 2; if the offset count is not less than 1 4, the offset count is left unchanged. In either case, 
microcomputer M1 then effects closing of valves 32 and 34, and the system enters retry. 

The above described logic of incrementing and/or decrementing the offset counter provides a l earning ro utine for 

55 enabling the establishing of a desired ignition temperature which is slightly above the lowest possible temperature at 
igniter 26 which will enable it to ignite the air-gas mixture. Specifically, in the first burner cycle after initialization, the 
duty cycle N, and the length of the warm-up time are established such that igniter 26 is heated to a temperature 
considerably above the lowest possible ignition temperature so as to ensure that ignition will occur. During the first 
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burner cycle, wherein flame 42 is established, the offset count is decremented, resulting in a lower duty cycle and 
a shorter warm-up time for the next burner cycle. Such a lower duty cycle causes a decrease in the effective voltage 
across igniter 26 in the next burner cycle and, in conjunction with the shorter warm-up time, a decrease in the temper- 
ature of igniter 26. Such decrementing continues during each successive burner cycle in which ignition is successful, 

5 until igniter 26 is no longer hot enough to ignite the air-gas mixture. In the burner cycle in which igniter 26 fails to provide 
ignition, the offset direction flag is set and the offset count is incremented by 2 so that on the next burner cycle, igniter 
26 will again be hot enough to provide ignition. Due to the setting of the offset direction flag and the provision of the 
cycle counter, decrementing of the offset count will not occur until the cycle counter exceeds a count value of 255. 
Thus, for the next 255 burner cycles, if ignition is successful in every cycle, decrementing of the offset count is prevented. 

10 Thus, if a failure to ignite after one or more successful burner cycles is truly due to igniter 26 no longer being hot 
enough, the subsequent burner cycle, due to the incrementing by 2 of the offset value, will again effect an increase in 
the temperature of igniter 26 so as to enable it to effect ignition. The system then operates at the increased igniter 
temperature during the next 255 burner cycles. When the cycle counter exceeds the value of 255, the cycle counter 
is reset to zero, the offset direction flag is turned off, and decrementing of the offset count can then again be effected. 

1$ Thus, if the prior failure to ignite was due to a factor other than igniter 26 not being hot enough, for example, due to 
low gas pressure, the system is not locked in a warm-up time of such duration and such modulation which would effect 
a higher than necessary igniter temperature. 

It is to be noted that incrementing the offset by 2 counts overcompensates slightly for the decrease in igniter 
temperature effected by the previous decrementing by 1 count. That is to say, if the offset were incremented by only 

20 1 count instead of 2, igniter 26 would then truly be at the lowest possible ignition temperature since ignition had occurred 
in the previous burner cycle before the offset count had been decremented by 1 count. However, the increase in the 
temperature of igniter 26, due to the additional 1 count is relatively small so that, with such a 2 count incrementing, 
igniter 26 is essentially at its lowest possible ignition temperature. Furthermore, it is to be understood that while incre- 
menting by 2 counts is preferred so as to establish essentially the lowest possible ignition temperature, the logic could 

25 be such that it could effect incrementing by more than 2 counts so as to establish some other desired ignition temper- 
ature which is higher than the lowest possible ignition temperature but still below the previously described maximum 
allowable temperature of 2325°F. The essential logic, whether the desired ignition temperature to be established is the 
lowest possible temperature or a higher temperature, is determining a level of energizing of igniter 26 at which it is no 
longer capable of effecting ignition, and thereafter increasing the level of energizing of igniter 26 to enable igniter 26 

30 to again effect ignition. 

Referring to FIG. 2E, if burner flame 42 exists, microcomputer M1 sets an internal 10 second flame stabilization 
timer. During this 10 second time period, microcomputer M1 checks for presence of flame 42 as would be indicated 
by a high signal at pins G2 and G3. At this time, the flame failure response time (FFRT) is 2 seconds. Therefore, if 
flame 42 is erratic, as it may be at the initiation of flame 42, and is not sufficiently stable to constantly impinge flame 

35 probe 44, microcomputer M1 will not interpret such non-impingement as a flame failure unless the non-impingement 
lasts for the FFRT of 2 seconds. If a flame failure of 2 seconds duration is detected, as would be indicated by a low 
signal at pins G2 and G3, microcomputer M1 effects closing of valves 32 and 34, and the system enters a recycle 
subroutine shown in FIG. 2H. (The recycle subroutine will hereinafter be described.) 

If flame 42 still exists after the 10 second flame stabilization timer times out, microcomputer M1 then zeros or 

40 clears the retry counter and sets an internal 0.8 second flame failure response time (FFRT) timer. Thus, subsequent 
to this time in the burner cycle, a flame failure of 0.8 seconds duration will be detectable. 

Microcomputer M1 then checks if the circulator blower on timer, which was started when flame 42 first appeared, 
has timed out. If the timer has timed out, microcomputer M1 effects turn on of circulator blower 22. Regardless of 
whether circulator blower 22 is turned on or not, microcomputer M1 proceeds to an inquiry as to whether flame 42 is 

45 present. 

If flame 42 continues to exist, microcomputer M1 then checks pressure switch 102 to ensure that inducer 1 3 is still 
turned on. If pressure switch 102 is open, the system enters lockout. 

If pressure switch 102 is closed, microcomputer M1 then performs another control check. If the control check 
indicates a malfunction, the system enters lockout; if the control check indicates that microcomputer M1 is functioning 
50 properly, microcomputer M1 remains in the program loop shown in FIG. 2E so long as there is a call for heat That is 
to say, so long as the contacts of thermostat 72 and limit device 70 remain closed, microcomputer M1 continues to 
check whether the circulator blower on timer is timed out and to turn on circulator blower 22 if the on timer times out, 
continues to monitor flame 42, continues to monitor pressure switch 102, and continues to perform the control check. 

If flame 42 is lost while there is still a call for heat, microcomputer M1 effects closing of valves 32 and 34, and the 
55 system enters recycle. In the recycle subroutine, as shown in FIG. 2H, microcomputer M1 increments an internal 
recycle counter. If the count in the recycle counter is 5, indicating that there have been 5 successive failures to sustain 
flame 42 either during or after the 10 second flame failure stabilization time period, the system enters lockout. If the 
count in the recycle counter is less than 5, microcomputer M1 effects the turn off of inducer 18. Microcomputer M1 
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then checks whether the circulator blower on timer is timed out. If the circulator blower on timer is timed out, circulator 
blower 22 is on; if the circulator blower on timer is not timed out, microcomputer M1 effects turn on of circulator blower 
22. Microcomputer M1 then starts the circulator blower off timer. When the circulator blower off timer times out, micro- 
computer M1 effects turn off of circulator blower 22, and the system returns to START. It is to be noted that causing 
circulator blower 22 to run for the blower off timer timing before returning to START, ensures reliable system operation. 
Specifically, if the system returns to START due to loss of flame 42, and if circulator blower 22 had not run for its off 
timer timing, the air in the furnace plenum may be hot enough to cause the contacts of limit device 70 to open, thus 
unnecessarily delaying the initiation of a proper burner cycle; or circulator blower 22 may be on at times in the subse- 
quent burner cycle when it is desired that circulator blower 22 be off. 

Under normal system operation, when thermostat 72 is satisfied, it opens its contacts, thus terminating a call for 
heat. It is to be noted that a call for heat can also be terminated by opening of the contacts of limit device 70, which 
opening would be caused by over-heating of the plenum air due to an abnormal condition. Regardless of whether the 
call for heat is terminated by thermostat 72 or limit device 70, microcomputer M1 , as shown in FIG. 2F, starts an internal 
30 second thermostat off timer and effects closing of gas valves 32 and 34. Microcomputer M1 then zeros or clears 
the recycle counter. 

Microcomputer M1 then executes a post-purge function. Specifically, due to the non-connection of resistor R60, 
the programmed post-purge time period is 20 seconds. Microcomputer M1 thus starts an internal 20 second timer. 
Microcomputer M1 also sets an internal 2 second flame failure response time (FFRT) timer. Thus, during the 20 second 
post-purge time period, a flame failure of 2 seconds duration will be detectable. 

Microcomputer M1 then checks whether the circulator blower on timer is timed out. If the circulator blower on timer 
is timed out, circulator blower 22 is on; if the circulator blower on timer is not timed out, microcomputer M1 effects turn 
on of circulator blower 22. Microcomputer M1 then checks if flame 42 is present. If flame 42 is absent, as it should be 
since gas valves 32 and 34 are closed, microcomputer M1 starts the circulator blower off timer. When the post-purge 
time period expires, the system returns to START. As previously described in reference to FIG. 2A, microcomputer M1 
then effects turn off of inducer 1 8 and, after the circulator blower off timer has timed out, turn off of circulator blower 22. 

If flame 42 is present during the post-purge time period, microcomputer M1 continues to check flame 42 until the 
post-purge timer times out. If flame 42 becomes absent within the post-purge time period, microcomputer M1 starts 
the circulator blower off timer. When the post-purge time period expires, the system returns to START 

If flame 42 is still present at the end of the post-purge time period, it would be present either because gas valve 
32 and 34 have not yet closed due to an inherent slow-closing construction, or because both gas valves 32 and 34 are 
leaking a sufficient amount of gas past their valve seats to maintain a flame 42 of sufficient magnitude to be detected 
by flame probe 44. As previously described in reference to FIG. 2A, when the system returns to START, microcomputer 
M1 then checks flame 42 for an additional 30 seconds. If flame 42 becomes absent during this 30 second time period, 
the circulator blower off timer is started. Microcomputer M1 then effects turn off of inducer 18 and, after the circulator 
blower off timer has timed out, turn off of circulator blower 22. If flame 42 still exists after the 30 second timer has timed 
out, the system enters lockout. 

The following components are deemed to be suitable for use in the system described herein. 
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Component 


Type 

* * 


Ml 


COP881 


Al, A2 


LM2904 


01, 02 


ZO410BE 


Q3-Q6,Q8,Q9,Q11,Q13 


2N6428 


Q7 


MPS-A42 


VR1 


1N5994 


VR2 


1N6007 


VR3 


1N6005 


VR4 


1N5992C 


Inverter 60,84,106,128, 

W W W ¥ 




132,134 


4049 


Opto-triac 140,142 


M0C3009 


CR1-CR14 


1N4004 


Rl, R2, R3, R19 


1M 


R4 


10M 


R5, R60-R67 


3.9k 


R6,R7,R32,R47,R50 


100k 


R8, R26, R36 


51k 


R9 


510k 


RIO 


200k 


Rll, R12 


120k 


R13-R17, R51, R55 


91 ohms 


R18,R24,R25,R31,R33,R48,R58 


10k 


R20, R22, R34 


430 ohms 


R21,R23,R35,R54,R59 


5.6k 


R27, R37 


20k 


R28,R52,R56,R68 


lk 


R29 


560 ohms 


R30 


3.3k 


R38, R39 


20M 


R40,R43 


226k 


R41, R44 


2B7k 


R42, R45 


21k 
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R46 
R49 



2.2k 
68k 

R53 ' R57 360 ohms 

.001 Mfd. 
• 1000 Mfd. 

10 C3 300 pfd ^ 



CI 
C2 



C4 



33 Mfd. 



75 



C5 ' C16 .033 Mfd. 

C6,C11,C12,C18 47 Mfd ^ 

C7 3.3 Mfd. 

C8 .1 Mfd. 

09 ' C1 ° 30 Pfd. 



20 C13 



.047 Mfd. 



014 . 22 Mfd. 

C1S 10 Mfd. 
25 C17 < 021 .0015 Mfd. 

C19 < C20 .022 Mfd. 

022 .22 Mfd. 

While the invention has been illustrated and described in detail in the drawings. and foregoing description, it will 
30 be recognized that many changes and modifications will occur to those skilled in the art. 

Claims 

35 1 . A fuel burner control system including a burner (28), valve means (32,34) controlling the flow of fuel to the burner 
(28), an electrical resistance igniter (26) connected across a power source (10) for igniting fuel at the burner (28), 
and 

control means (N/^ , Q, , Q 2 , 1 36, 1 40, 1 42) for effecting energizing of said igniter (26) in a first burner cycle so 
40 as to cause said igniter (26) to attain ignition temperature, and for establishing characteristics of said energizing 

effective to cause said igniter (26) to be heated to a desired value of said ignition temperature, 
characterized in that said control means comprises means (M v Q v Q 2 , 136) effecting a reduction of said 
energizing in subsequent successive burner cycles in which ignition is successful until a burner cycle occurs 
in which ignition is not successful, said means (M-,, Q 2 , 136) subsequently effecting an increase of said 
45 energizing so as to cause said igniter (26) to be heated to said desired value of said ignition temperature which 

is at or slightly above the lowest possible value. 

2. The control system as claimed in claim 1, characterized in that said control means (M,, Q,, Q 2> 136, 140, 142) 
comprises: 

so 

switching means (Q 1t Q 2 ), connecting said igniter (26) across an alternating current power source (10); 
circuit means (140, 142) for controlling conduction of said switching means (O,, Q 2 ); 
circuit means (136) for sensing voltage applied to said igniter (26); and 

a microcomputer (Ivl,) connected to said circuit means (140,142) for controlling conduction of said switching 
55 means (Q v Q 2 ) and to said circuit means (136) for sensing voltage applied to said igniter (26), said micro- 

computer (M-,) including program means for establishing a warm-up time period, for effecting conduction of 
said switching means (Q 1( Q 2 ) and thereby effecting energizing of said igniter (26) during said warm-up time 
period so as to cause said igniter (26) to attain ignition temperature, and for determining the length of said 
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warm-up time period in response to voltage values sensed by said circuit means (136) tor sensing voltage 
applied to said igniter (26) and in response to a learning routine, 

said learning routine being effective to cause said igniter (26), after successive ignition attempts, to be heated 
to a desired value of said ignition temperature. 

3. The control system claimed in claim 2, characterized in that said learning routine includes an offset function, said 
offset function including a count in a counter in said microcomputer (M 1 ), said count having an initial value when 
power is initially applied to effect initialization of said microcomputer, said count being decremented upon the 
occurrence of each of said successive ignition attempts after said initialization which result in ignition, and said 
count being subsequently incremented upon the occurrence of a first ignition attempt which does not result in 
ignition. 

4. The control system claimed in claim 3, characterized in that, after- said count has been subsequently incremented 
upon said occurrence of a first ignition attempt which does not result in ignition, said count is prevented from 
decrementing for a predetermined number of ignition attempts. 

5. The control system claimed in claims 2 or 3, characterized in that said switching means (Q,, Q 2 ) comprises two 
triacs (Q v Q 2 ), one (Q^ of said triacs being connected to one side of said igniter (26) and the other (Qg) of said 
triacs being connected to the opposite side of said igniter (26), 

said microcomputer (M-,) including program means for effecting alternate conduction of said triacs (Q 1f Q 2 ) 
during a time period when said igniter (26) is de-energized and being responsive, during said alternate con- 
duction, to a value of voltage sensed by said circuit means (136) for sensing voltage applied to said igniter 
(26) so that said program means is effective for determining whether said triacs (Q 1t Q 2 ) are half-waving or 
are shorted. 

6. The control system claimed in claim 2, characterized in that said switching means (Q 1? Q 2 ) comprises two triacs 
(Q v Q 2 ), one (Q^ of said triacs being connected to one side of said igniter (26) and the other (Q 2 ) of said triacs 
being connected to the opposite side of said igniter (26), 

said microcomputer (M.,) including program means for effecting simultaneous conduction of said triacs (Q lf 
Q 2 ) during a time period when said igniter (26) is energized and being responsive, during at least a portion of 
the time when said simultaneous conduction is occurring to a value of voltage sensed by said circuit means 
(136) for sensing voltage applied to said igniter (26), so that said program means is effective for determining 
whether said triacs (Q v Q 2 ) are half-waving or are shorted. 

7. The control system claimed in claim 6, characterized in that said program means for determining whether said 
triacs (Q-, , Q 2 ) are half-waving or are shorted is concurrently effective for determining whether said igniter (26) is 
open or not connected to said power source (10). 

8. The control system claimed in claim 2, characterized in that said valve means (32,34) are electrically operated, and 

said system further including two sets of series-connected normally-open relay contacts (1 1 2, 11 6) connecting 
said valve means (32,34) across said power source (10), two relay coils (108,110) for controlling said two sets 
of relay contacts and relay contact checking circuit means (124) connected between said microcomputer (M,) 
and said two sets ol relay contacts (112,116), 

said microcomputer (M-,) including program means for effecting alternate closing of said two sets of relay 
contacts (112,116) and being responsive to said relay contact checking circuit means (124) during said alter- 
nate closing for determining whether one or both of said two sets of relay contacts (112, 116) are closed when 
they should be open. 

9. The control system claimed in claim 8, characterized in that said microcomputer (M^ includes program means for 
effecting simultaneous closing of said two sets of relay contacts (112, 116) and being responsive to said relay 
contact checking circuit means (1 24) during said simultaneous closing for determining whether one or both of said 
two sets of relay contacts (1 1 2, 1 1 6) are open when they should be closed and for determining whether said relay 
contact checking circuit means (1 24) is functioning properly. 

10. The control system claimed in claim 9, characterized in that said microcomputer (M,) includes program means for 
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effecting energizing of at least one of said relay coils (108,110) at a frequency considerably higher than the fre- 
quency of said power source (10) upon initiation of said simultaneous closing and for subsequently reducing said 
frequency to a lower value. 

5 11. The control system according to anyone of claims 1-10 characterized in further including: 

means (44) for sensing flame at said burner (28); 
a circulator blower (22) for distributing air heated by said flame (42); 
means (70,72,84) for establishing a call for heat; and 
10 means (Iv^) responsive to a sensed flame (42) during a time when there is no call for heat for effecting ener- 

gizing of said circulator blower (22). 

12. The control system claimed in claim 11, characterized in further including means responsive to initial sensing of 
said flame (42) during said call for heat for initiating a circulator blower on timer and for effecting energizing of said 

is circulator blower (22) when said on timer times out. 

13. The control system claimed in claim 12, characterized in that said means responsive to a sensed flame during a 
time when there is no call for heat includes means for effecting initial energizing of said circulator blower (22) in 
the event said circulator blower on timer is not timed out. 

20 

14. The control system claimed in claim 1 2, characterized in further including means responsive to termination of said 
call for heat for effecting initial energizing of said circulator blower (22) in the event said circulator blower on timer 
is not timed out, and means responsive to loss of flame (42) upon said termination of said call for heat for initiating 
a circulator blower off timer and for effecting de-energizing of said circulator blower (22) when said off timer times 

25 out. 

15. A method for controlling energizing of an electrical resistance igniter (26) in a fuel burner control system, comprising 
the step of: 

30 energizing the igniter (26) in a first burner cycle at a level of energizing adequate to cause said igniter (26) to 

be heated to a temperature sufficiently high to ignite the fuel; 
characterized by the steps of: 

reducing said level of energizing in subsequent successive burner cycles in which ignition occurs until an 
35 unsuccessful burner cycle occurs in which ignition does not occur; and 

subsequently increasing said reduced level of energizing so as to establish a level of energizing which 
will cause said igniter (26) to be heated to a desired temperature value at or slightly above the lowest 
possible value effective to ignite said fuel. 

40 

Patentanspruche 

1. SteuerungssystemfOrBrennstoff-Brenner, daseinen Brenner (28) umfasst, eine Ventileinrichtung (32, 34), welche 
die Stromung des Brennstoffes zum Brenner (28) steuert, einen elektrischen Widerstandsz under (26), der an eine 
45 Stromquelle (10) angeschlossen ist, urn Brennstoff beim Brenner (28) zu zunden, und 

eine Steuerungseinrichtung (M,, Q lf Q 2 , 136, 140, 142) urn zu bewirken, dass in einem ersten Brennerzyklus 
Strom zum Zunder (26) gef uhrt wird, damit verursacht wird, dass der Zunder (26) die Zundtemperatur erreicht, 
und urn eine Charakteristik dieser Stromzufuhr zu errichten, die bewirkt, dass der Zunder (26) auf einen ge- 
50 wunschten Wert der Zundtemperatur erhitzt wird, 

dadurch gekennzeichnet, dass die Steuerungseinrichtung eine Einrichtung (M 1 , Q 2> 136) umfasst, die eine 
Reduktion der Stromzufuhr bei anschliessenden aufeinanderfolgenden Brennerzyklen bewirkt, bei denen die 
Zundung erfolgreich ist, bis ein Brennerzyklus stattfindet, bei welchem die Zundung nicht erfolgreich ist, wobei 
55 die Einrichtung (M lt Q lt Q 2 , 136) anschliessend ein Anwachsen der Stromzufuhr bewirkt, damit verursacht 

wird, dass der Zunder (26) auf den gewunschten Wert der Zundtemperatur erhitzt wird, der sich bei Oder ein 
wenig uberdem tiefstmoglichen Wert befindet. 
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Steuerungssystem nach Anspruch 1, dadurch gekennzeichnet, dassdie Steuerungseinrichtung (M^ Q t , Q 2 , 136, 
140, 142) umfasst: 

eine Schaltereinrichtung (Q lt Q 2 ), welche den Zunder (26) an eine Wechselstromquelle (10) anschliesst; 

eine Schaltungseinrichtung (140, 142), urn das Leiten der Schaltereinrichtung (Q 1( Q 2 ) zu steuern; 

eine Schaltungseinrichtung (136), urn die an den Zunder (26) angelegte Spannung zu messen; und 

einen Mikrocomputer (M-,), der an die Schaltungseinrichtung (140, 142) zum Steuern des Leitens der Schal- 
tereinrichtung (Q 1t Q 2 ) und an die Schaltungseinrichtung (1 36) zurn Messen der an den Zunder (26) angeleg- 
ten Spannung angeschlossen ist, wobei der Mikrocomputer (M^) eine Programmed richtung umfasst, um eine 
Aufwarm-Zeitperiode zu errichten, um ein Leiten der Schaltereinrichtung (Q v Q 2 ) zu bewirken und dadurch 
zu bewirken, dass wahrend der Aufwarm-Zeitperiode der Strom zum Zunder (26) gef Ohrt wird, damit verursacht 
wird, dass der Zunder (26) die Zundtemperatur erreicht, und um in Abhangigkeit der Spannungswerte, die 
durch die Schaltungseinrichtung (1 36) zum Messen der an den Zunder (26) angelegten Spannung gemessen 
werden und in Abhangigkeit eines lemenden Programms die Lange der Aufwarm-Zeitperiode zu bestimmen, 

wobei das lemende Programm wirksam ist um zu verursachen, dass der Zunder (26), nach aufeinanderfol- 
genden Zundversuchen, auf einen gewunschten Wert der Zundtemperatur erhitzt wird. 

Steuerungssystem nach Anspruch 2, dadurch gekennzeichnet, dass das lemende Programm eine Verschiebungs- 
funktion umfasst, wobei die Verschiebungsfunktion eine zahl in einem Zahler im Mikrocomputer (M^ umfasst, 
wobei diese Zahl, wenn am Anfang der Strom eingeschaltet wird, um die Initialisierung des Mikrocomputers zu 
bewirken, einen Initialisierungswert hat, wobei diese Zahl nach dem Auftreten von jedem der aufeinanderfolgenden 
Zundversuche nach der Initialisierung, welche eine Zundung zur Folge haben, um 1 erniedrigt wird, und wobei 
diese Zahl anschliessend nach dem Auftreten eines ersten Zundversuches, welcher keine Zundung zur Folge hat, 
um erhoht wird. 

Steuerungssystem nach Anspruch 3, dadurch gekennzeichnet, dass, nachdem diese Zahl nach dem Auftreten 
eines ersten Zundversuches, welcher keine Zundung zur Folge hat, anschliessend um 1 erhoht worden ist, wah- 
rend einer vorgegebenen Anzahl von Zundversuchen verhindert wird, dass diese Zahl um 1 erniedrigt wird. 

Steuerungssystem nach Anspruch 2 oder 3, dadurch gekennzeichnet, dass die Schaltereinrichtung (Q-,, Q 2 ) zwei 
Triacs (Q 1s Q 2 ) umfasst, wobei einer (Q^ der Triacs an der einen Seite des Zunders (26) angeschlossen ist und 
der andere (Q 2 ) der Triacs an der gegenuberliegenden Seite des Zunders (26) angeschlossen ist, 

wobei der Mikrocomputer (M-,) eine Programmeinrichtung umfasst, um wahrend einer Zeitperiode, wenn kein 
Strom zum Zunder (26) gefuhrt wird, abwechselndes Leiten der Triacs (Q^ Q 2 ) zu bewirken, und wobei er 
wahrend dem abwechselnden Leiten auf einen Wert der durch die Schaltungseinrichtung (136) zum Messen 
der an den Zunder (26) angelegten Spannung gemessenen Spannung reagiert, so dass die Programmein- 
richtung wirksam ist, um zu bestimmen, ob die Triacs (Q lf Q 2 ) mit einer Halbwelle schwingen Oder kurzge- 
schlossen sind. 

Steuerungssystem nach Anspruch 2, dadurch gekennzeichnet, dass die Schaltereinrichtung (Q 1 , Q 2 ) zwei Triacs 
(Q^ Q 2 ) umfasst, wobei einer (Q-,) der Triacs an der einen Seite des Zunders (26) angeschlossen ist und der 
andere (Q 2 ) der Triacs an der gegenuberliegenden Seite des Zunders (26) angeschlossen ist, 

wobei der Mikrocomputer (M1) eine Programmeinrichtung umfasst, um wahrend einer Zeitperiode, wenn 
Strom zum Zunder (26) gefuhrt wird, gleichzeitiges Leiten der Triacs (Q 1p Q 2 ) zu bewirken, und wobei er 
wahrend mindestens einem Teil der Zeit, zu der dieses gleichzeitige Leiten stattfindet, auf einen Wert der 
durch die Schaltungseinrichtung (136) zum Messen der an den Zunder (26) angelegten Spannung gemesse- 
nen Spannung, reagiert, so dass die Programmeinrichtung wirksam ist, um zu bestimmen, ob die Triacs (Q^ 
Q 2 ) mit einer Halbwelle schwingen Oder kurzgeschlossen sind. 

Steuerungssystem nach Anspruch 6, dadurch gekennzeichnet, dass die Programmeinrichtung zum Bestimmen, 
ob die Triacs (Qj, Q 2 ) mit einer Halbwelle schwingen oder kurzgeschlossen sind, gleichzeitig wirksam ist um zu 
bestimmen, ob der Zunder (26) offen oder nicht an die Stromquelle (10) angeschlossen ist. 
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8. Steuerungssystem nach Anspruch 2, dadurch gekennzeichnet, dass die Ventileinrichtung (32, 34) elektrisch be- 
tatigt wird, und 

dass das System weiter zwei Satze von in Serie angeschlossenen Relais-Arbeitskontakte (1 1 2, 11 6) umfasst, 
5 welche die Ventileinrichtung (32, 34) an die Stromquelle anschliessen, zwei Relaisspulen (108, 110), urn die 

zwei Satze von Relaiskontakten (112, 116) zu steuem, und eine Schaltungseinrichtung (124) fur die Uberpru- 
fung der Relaiskontakte, die zwischen dem Mikrocomputer (M^.und den zwei Satzen von Relaiskontakten 
(112, 116) angeschlossen ist, 

*0 wobei der Mikrocomputer (M1) eine Programmeinrichtung umtasst, urn ein abwechselndes Schliessen der 

zwei Satze von Relaiskontakten (112, 116) zu bewirken, und er wahrend dem abwechselnden Schliessen aut 
die Schaltungseinrichtung (124) fur die Oberprufung der Relaiskontakte reagiert, urn zu bestimmen, ob ein 
oder beide der zwei Satze von Relaiskontakten (112, 116) geschlossen sind, wenn sie often sein sollten. 

1$ 9. Steuerungssystem nach Anspruch 8, dadurch gekennzeichnet, dass der Mikrocomputer (M^ eine Programmein- 
richtung umfasst, um ein gleichzeitiges Schliessen der zwei Satze von Relaiskontakten (112, 116) zu bewirken, 
und er wahrend dem gleichzeitigen Schliessen auf die Schaltungseinrichtung (124) fur die Oberprufung der Re- 
laiskontakte reagiert, um zu bestimmen, ob ein oder beide der zwei Satze von Relaiskontakten (112, 116) often 
sind, wenn sie geschlossen sein sollten, und um zu bestimmen, ob die Schaltungseinrichtung (124) fur die Uber- 

20 prufung der Relaiskontakte korrekt funktioniert. 

10. Steuerungssystem nach Anspruch 9, dadurch gekennzeichnet, dass der Mikrocomputer (M1) eine Programmein- 
richtung umfasst um zu bewirken, dass nach dem Beginn des gleichzeitigen Schliessens Strom zu mindestens 
einer der Relaisspulen (108, 110) gefuhrt wird mit einer Frequenz, die betrachtlich grosser ist als die Frequenz 

25 der Stromquelle (10), und um anschliessend diese Frequenz auf einen tieferen Wert zu reduzieren. 

11. Steuerungssystem nach irgend einem der Anspruche 1 - 10, dadurch gekennzeichnet, dass es weiter umfasst: 

eine Einrichtung (44) zum Messen der Flamme beim Brenner (28); 

30 

ein Umlaufgeblase (22) zum Verteilen derdurch die Flamme (42) erhitzten Luft; 

eine Einrichtung (70, 72, 84) zum Errichten einer Nachfrage nach Warme; und 

55 eine Einrichtung (M^, die wahrend einer Zeit, zu der es keine Nachfrage nach Warme gibt, auf eine gemessene 

Flamme reagiert, um zu bewirken, dass der Strom zum Umlaufgeblase (22) eingeschaltet wird. 

12. Steuerungssystem nach Anspruch 11 , dadurch gekennzeichnet, dass es weiter eine Einrichtung umfasst, die wah- 
rend der Nachfrage nach Warme auf das ursprungliche Messen der Flamme (42) reagiert, um einen Einschalt- 

40 Zeitgeber fur das Umlaufgeblase zu starten und um zu bewirken, dass der Strom zum Umlaufgeblase (22) einge- 

schaltet wird, wenn dieser Einschalt-Zeitgeber abgelaufen ist. 

13. Steuerungssystem nach Anspruch 12, dadurch gekennzeichnet, dass die Einrichtung, die wahrend einer Zeit, zu 
der es keine Nachfrage nach Warme gibt, auf eine gemessene Flamme reagiert, eine Einrichtung umfasst, um ein 

45 ursprungliches Einschalten des Stromes zum Umlaufgeblase (22) zu bewirken im Falle, wo der Einschalt-Zeitgeber 

fur das Umlaufgeblase nicht abgelaufen ist. 

Steuerungssystem nach Anspruch 12, dadurch gekennzeichnet, dass es weiter eine Einrichtung umfasst, die auf 
die Beendigung der Nachfrage nach Warme reagiert, um ein ursprungliches Einschalten des Stromes zum Um- 
laufgeblase (22) zu bewirken im Falle, wo der Einschalt-Zeitgeber fur das Umlaufgeblase nicht abgelaufen ist, und 
eine Einrichtung, die auf einen Verlust der Flamme (42) nach der Beendigung der Nachfrage nach Warme reagiert, 
um einen Ausschalt-Zeitgeber fur das Umlaufgeblase zu starten und um zu bewirken, dass der Strom zum Um- 
laufgeblase (22) ausgeschaltet wird, wenn dieser Ausschalt-Zeitgeber abgelaufen ist. 

15. Verfahren zum Steuem der Stromzufuhr an einen elektrischen Widerstandszunder (26) in einem Steuerungssy- 
stem fur Brennstoffbrenner, das die Schritte umfasst: 

den Strom in einem ersten Brennerzyklus auf einem Niveau zum Zunder (26) zu fuhren, das ausreicht um zu 



14. 

so 
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verursachen, dass der Zunder (26) auf eine genugend hohe Temperatur erhitzt wird, urn den Brennstoff zu 
zunden; 

gekennzeichnet durch die Schritte: 

5 

das Niveau der Stromzufuhr bei anschliessenden aufeinanderfolgenden Brennerzyklen, bei welchen die Zun- 
dung stattfindet, zu reduzieren, bis ein nicht erfolgreicher Brennerzyklus stattfindet, bei welchem die Zundung 
nicht stattfindet; und 

10 anschliessend das reduzierte Niveau der Stromzufuhr zu erhohen, um ein Niveau der Stromzufuhr zu errich- 

ten, das bewirken wird, dass der Zunder (26) auf einen gewunschten Temperaturwert bei oder ein wenig uber 
dem tiefstmoglichen Wert, der wirksam ist, um den Brennstoff zu zunden, erhitzt wird. 



15 Revendlcations 

1. Systeme de commande d'un brQIeur a combustible englobant un brOleur (28), des moyens de clapets (32, 34) 
regiant I'ecoulement du combustible en direction du bruleur (28), un dispositif d'allumage (26) a resistance elec- 
trique branche sur une source de courant (10) pour enflammer du combustible au bruleur (28), et 

20 

un moyen de commande (M 1t Q 1( Q 2 , 136, 140, 142) pour realiser I'excitation dudit dispositif d'allumage (26) 
dans un premier cycle de bruleur pour faire en sorte que (edit dispositif d'allumage (26) atteigne une tempe- 
rature d'allumage et pour etablir des caracteristiques de ladite excitation efficaces pour faire en sorte que ledit 
dispositif d'allumage (26) soit chauffe a une valeur desiree de ladite temperature d'allumage, 

25 caracterise en ce que ledit moyen de commande comprend des moyens (Iv^ , , Q 2 , 1 36) mettant en oeuvre 

une reduction de ladite excitation dans des cycles de bruleur successifs ulterieurs dans lesquels i'allumage 
est realise avec succes, jusqu'a ce qu'un cycle de bruleur apparaisse dans lequel I'allumage est defaillant, 
lesdits moyens (M^ Q-,, Q 2 , 136) effectuant par la suite une augmentation de ladite excitation pour faire en 
sorte que ledit dispositif d'allumage (26) soit chauffe a ladite valeur desiree de ladite temperature d'allumage 

30 qui se situe a la valeur la plus basse possible ou a une valeur tegerement sup6rieure a cette derniere. 

2. Systeme de commande selon la revendication 1, caracterise en ce que ledit moyen de commande (M,, Q 1f Q 2> 
136, 140, 142) comprend: 

35 un moyen de commutation (Q 1 , Q 2 ) connectant ledit dispositif d'allumage (26) a une source de courant alter- 

natif (10); 

un moyen de circuit (140, 142) pour commander la conduction dudit moyen de commutation (C^, Q 2 ) ; 
un moyen de circuit (136) pour detecter la tension appliquee audit dispositif d'allumage (26); et 
un microordinateur (M^ connecte audit moyen de circuit (140, 142) pour commander la conduction dudit 
40 moyen de commutation (Q 1( Q 2 ) et audit moyen de circuit (136) pour detecter la tension appliquee audit dis- 

positif d'allumage (26), 

ledit microordinateur (M^ englobant des moyens de programme pour etablir une periode de temps d'echauf- 
fement, pour realiser la conduction dudit moyen de commutation (Q t , Q 2 ) et pour ainsi realiser I'excitation 
dudit dispositif d'allumage (26) au cours dudit laps de temps d'echauffement pour que ledit dispositif d'allumage 

45 (26) atteigne la temperature d'allumage, et pour determiner la longueur dudit laps de temps d'echauffement 

en reponse aux valeurs de tension detectees par ledit moyen de circuit (1 36) pour detecter la tension appliquee 
audit dispositif d'allumage (26) et en reponse a un sous-programme d'apprentissage, 
ledit sous-programme d'apprentissage etant efficace pour faire en sorte que ledit dispositif d'allumage (26), 
apres des tentatives d'allumage successives, soit chauffe a une valeur desiree de ladite temperature d'allu- 

$o mage. 

3. Systeme de commande selon la revendication 2, caracterise en ce que ledit sous-programme d'apprentissage 
englobe une fonction de decalage, ladite fonction de decalage englobant un compte dans un compteur dans ledit 
microordinateur (M-,), ledit compte possedant une valeur initiale lorsqu'on applique initialement du courant pour 

ss realiser Initialisation dudit microordinateur, ledit compte etant decrements lors de chacune desdites tentatives 

d'allumage successives apres ladite initialisation donnant lieu a I'allumage, et ledit compte etant ensuite incremente 
a I'apparition de la premiere tentative d'allumage qui ne donne pas lieu a un allumage. 
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4. Systeme de commande selon la revendication 3, caracterise en ce que, apres que ledit compte a 6te incr6ment6 
par la suite lors de ladite apparition d'une premiere tentative d'allumage qui ne donne pas lieu a I'allumage, le 
decrementage dudit compte est empSche pendant un nombre predetermine de tentatives d'allumage. 

5 5. Systeme de commande selon la revendication 2 ou 3, caracterise en ce que ledit moyen de commutation (Q lf Q 2 ) 
ccmprend deux thyristors (Q.,, Q 2 ), un desdits thyristors (C^) etant connecte a un cote dudit dispositif d'allumage 
(26) et I'autre desdits thyristors (Q 2 ) etant connecte au cote oppose dudit dispositif d'allumage (26), 

ledit microordinateur (M-,) englobant un moyen de programme pour realiser une conduction alternee desdits 
10 thyristors (Q 1t Q 2 ) pendant un laps de temps dans lequel ledit dispositif d'allumage (26) est desexcite et etant 

sensible, au cours de ladite conduction alternee, a une valeur de tension detectee par ledit moyen de circuit 
(136) pour detecter la tension appliquee audit dispositif d'allumage (26) de telle sorte que ledit moyen de 
programme est efficace pour determiner lefait de savoir si lesdits thyristors (Q1 , Q2) travaillent en demi-ondes 
ou sont court-circuites. 

6. Systeme de commande selon la revendication 2, caracterise en ce que ledit moyen de commutation (Q v Q 2 ) 
comporte deux thyristors (Q 1 , Q 2 ) un desdits thyristors (Q } ) etant connects a un cote dudit dispositif d'allumage 
(26) et I'autre desdits thyristors (Q 2 ) etant connecte au cote oppose dudit dispositif d'allumage (26), 

20 ledit microordinateur (Mj ) englobant un moyen de programme pour effectuer une conduction simultanee des- 

dits thyristors (Q v Q 2 ) au cours d'un laps de temps dans lequel ledit dispositif d'allumage (26) est excite et 
etant sensible, au cours d'au moins une portion du temps dans lequel a lieu ladite conduction simultanee, a 
un valeur de tension detectee par ledit moyen de circuit (1 36) pour detecter la tension appliquee audit dispositif 
d'allumage (26) de telle sorte que ledit moyen de programme est efficace pour determiner le fait de savoir si 

2S lesdits thyristors (Q 1( Q 2 ) travaillent en demi-ondes ou sont court-circuites. 

7. Systeme de commande selon la revendication 6, caracterise en ce que ledit moyen de programme pour determiner 
le fait de savoir si lesdits thyristors (C^ , Q 2 ) travaillent en demi-ondes ou sont court-circuites est efficace de maniere 
concourante pour determiner le fait de savoir si ledit dispositif d'allumage (26) est ouvert ou n'est pas connecte a 

30 ladite source de courant (10). 

8. Systeme de commande selon la revendication 2, caracterise en ce que lesdits moyens de clapets (32 et 34) sont 
entraTnes par voie electrique, et 

35 ledit systeme englobant en outre deux jeux de contacts-re lais normalement ouverts montes en serie (112, 

116) connectant lesdits moyens de clapets (32, 34) a ladite source de courant (10), deux bobines de relais 
(108, 110) pour commander lesdits deux jeux de contacts-relais (112, 116) et un moyen de circuit (124) de 
verification des contacts-relais connectes entre ledit microordinateur (M-,) et lesdits deux jeux de contacts- 
relais (112, 116), 

40 ledit microordinateur (M,) englobant un moyen de programme pour effectuer la fermeture alternee desdits 

deux jeux de contacts-relais (112, 116) et etant sensible audit moyen de circuit de verification de contacts- 
relais (124) au cours de ladite fermeture alternee pour determiner le fait de savoir si un desdits deux jeux de 
contacts-relais (112, 116) ou les deux sont fermes, alors qu'ils devraient etre ouverts. 

45 9. Systeme de commande selon la revendication 8, caracterise en ce que ledit microordinateur (Iv^) englobe un 
moyen de programme pour effectuer la fermeture simultanee desdits deux jeux de contacts-relais (112, 116) et 
est sensible audit moyen de circuit de verification de contacts-relais (124) au cours de ladite fermeture simultanee 
pour determiner le fait de savoir si un desdits deux jeux de contacts-relais (112, 116) ou les deux sont ouverts, 
alors qu'ils devraient etre fermes, et pour determiner le fait de savoir si ledit moyen de circuit de verification de 

50 contacts-relais (124) fonctionne de maniere adequate. 

10. Systeme de commande selon la revendication 9, caracterise en ce que ledit microordinateur (N^) englobe un 
moyen de programme pour effectuer I'excitation d'au moins une desdites bobines de relais (108, 110) a une fre- 
quence considerablement superieure a la frequence de ladite source de courant (1 0) au debut de ladite fermeture 

ss simultanee et pour reduire par la suite ladite frequence a une valeur inferieure. 

1 1 . Systeme de commande selon i'une quelconque des revendications 1 a 1 0, caracterise en ce qu'il englobe, en outre: 
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un moyen (44) pour d6tecter une flamme audit bruleur (28); 

un ventilateur a circulation (22) pour distribuer de I'air chauffe par ladite flamme (42); 
des moyens (70, 72, 84) pour etablir un demands de chaleur; et 

un moyen (M-,) sensible a une flamme detected (42) pendant un laps de temps au cours duquel une demande 
5 de chaleur est inexistante, pour effectuer I'excitation dudit ventilateur a circulation (22). 

12. Systeme de commande selon la revendication 11, caracterise en ce qu'il englobe en outre un moyen sensible a 
la detection initiale de ladite flamme (42) lors de ladite demande de chaleur pour mettre en circuit un registre 
d'horloge "on" du ventilateur a circulation et pour effectuer I'excitation dudit ventilateur a circulation (22) lorsque 

10 ledit registre d'horloge "on" se trouve en delai d'attente. 

13. Systeme de commande selon la revendication 12, caracterise en ce que ledit moyen sensible a une flamme de- 
tected au cours de la periods dans laquelle il n'y a pas de demande de chaleur, englobe un moyen pour effectuer 
I'excitation initiale dudit ventilateur a circulation (22) au cas ou ledit registre d'horloge "on" du ventilateur a circu- 

15 lation ne se trouve pas en d6lai d'attente. 

14. Systeme de commande selon la revendication 12, caracterise en ce qu'il englobe en outre un moyen sensible a 
la terminaison de ladite demande de chaleur pour effectuer une excitation initiale dudit ventilateur a circulation 
(22) dans le cas ou ledit registre d'horloge "on" du ventilateur a circulation ne se trouve pas en delai d'attente, et 

20 un moyen sensible a la perte de flamme (42) apres ladite terminaison de ladite demande de chaleur pour declen- 

cher un registre d'horloge fl off D de ventilateur a circulation et pour effectuer la desexcitation dudit ventilateur a 
circulation (22) lorsque ledit registre d'horloge "off* se trouve en delai d'attente. 

15. Procede pour commander rexcitatiori d'un dispositif d'allumage (26) a resistance electrique dans un systeme de 
25 commande de bruleur a combustible, comprenant I'etape consistant a: 

exciter le dispositif d'allumage (26) dans un premier cycle de bruleur a un niveau d'excitation adequat tel que 
ledit dispositif d'allumage (26) 'est chauffe a une temperature suffisamment elevee pour enflammer ie com- 
bustible; 

30 caracterise" par les 6tapes consistant a: 

reduire ledit niveau d'excitation dans des cycles de bruleur successifs ulterieurs dans lesquels I'allumage 
se produit jusqu'a ce qu'un cycle de bruleur manifeste une defaillance, dans lequel I'allumage ne se produit 
pas; et 



35 



40 



45 



50 



augmenter par la suite ledit niveau reduit d'excitation de facon a etablir un niveau d'excitation tel que ledit 
dispositif d'allumage (26) sera chauffe a une valeur de temperature desiree a la valeur la plus basse 
possible ou a une valeur legerement superieure a cette derniere, efficace pour enflammer ledit combus- 
tible. 
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FIG. 2B 
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FIG. 2C 
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FIG. 2E 



SET 10 SEC. 
FLAME STAB. 
TIMER 




NO 



6/13/05, EAST Version: 2.0.1.<4 



EP0 385 910B1 



FIG 



START 30 SEC* 
THERM. OFF 
TIMER 



| CLOSE 


VALVES : 






ZERO RECYCLE 
COUNTER 






START 
POST- PURGE 
TIMER 








SET 2 SEC. 
FFRT TIMER 







/IS \ 
/ CIRC. \ 
BLOWER On\N£ 
TIMER TIMED/ 
V OUT / 



YES 




START CIRC 
BLOWER OFF 
TIMER IF NOT 
ALREAOY STARTED 




YES 



TO START 



TURN ON 
CIRC. BLOWER 



6/13/05, EAST Version: 2.0.1 



EP 0 385 910 B1 



FIG. 2G 
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FIG. 21. 
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